resolve acl issue where user with reader and writer roles can't read
Merge pull request #287 from ksclarke/acl-writer-68547530

resolves issue where user with 'writer' role can't list ACL

Resolves: https://www.pivotaltracker.com/story/show/68547530