checking if acl begins with '*'