Updated rules to reject if the slug is an acl

Author: jaxoncreed

lib/acl-checker.js

@@ -50,10 +50,15 @@ class ACLChecker {
       resource = rdf.sym(ACLChecker.getDirectory(this.resource))
     }
     // If this is an ACL, Control mode must be present for any operations
-    if (this.isAcl(this.resource) || this.isAcl(decodeURIComponent(this.slug))) {
+    if (this.isAcl(this.resource)) {
       mode = 'Control'
       resource = rdf.sym(this.resource.substring(0, this.resource.length - this.suffix.length))
     }
+    // If the slug is an acl, reject
+    if (this.isAcl(decodeURIComponent(this.slug))) {
+      this.aclCached[cacheKey] = Promise.resolve(false)
+      return this.aclCached[cacheKey]
+    }
     const directory = acl.isContainer ? rdf.sym(ACLChecker.getDirectory(acl.acl)) : null
     const aclFile = rdf.sym(acl.acl)
     const agent = user ? rdf.sym(user) : null