debug hasAllowedForAcl