add_read_acl works