adding acl rule to actually allow that request