Move acl check in instance to a proper place (fixes issue with create from xml)