Acl rules and authentication