faster acl query