added support for updating ACL on endpoint