ACL perm check, and test for users