acl module: now compares permissions correctly

should fix comparison bug reported in closed #6501