initial acl and users