ACL not evaluated when embedded version of LOs are requested