add student aid permissions to ACL