add acl for static