r4389: added checking for the default inherited ACL, which is used when no ACEs