add ACL to rotate.php
add ACL to rotate.php