refactor acl collection