Read ACL for ?acl resource from headers or body