ensure acl controller resource exists