changes ACL to public, but need it viewed only by 1 user