new support for acl validation