added more acl rules, fixed a bug in the existing acl