Fixed critical permission check in ACL