add tests for acl tag filtering