Fix acl setup for all roles