ACL: fix the default rights and rights updating