Fix bug in ACL with private resource