acl fix when no groups exist in the workspace