read ACLs in pentaho repository properly as well