fix disable_acl_changes on users