typo in hiddenvars, causes search in acl to loose the user/group and default to the current user, thanks to Nick Mossie (ldeviator)