configuration: updated acl.xml