fix SurfCheckAclContainsOnlyOwnStateSps