a few fixes for ACL and metadata resources