generate ACLs when creating user and history entities