auth: Empty acl === there is not restrictions