# ACL incorrectly creates ACL groups

**URL:** <https://discuss.dgraph.io/t/acl-incorrectly-creates-acl-groups/8017>\
**Category:** Ratel\
**Tags:** kind:bug, ratel, priority:p0, area:commercial:acl\
**Created:** [October 2, 2019, 2:04am UTC](https://discuss.dgraph.io/t/acl-incorrectly-creates-acl-groups/8017 "2019-10-02T02:04:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![diggy](https://yyz1.discourse-cdn.com/flex007/user_avatar/discuss.dgraph.io/diggy/32/3666_2.png) [@diggy](https://discuss.dgraph.io/u/diggy)\
**Post date:** [October 2, 2019, 2:04am UTC](https://discuss.dgraph.io/t/acl-incorrectly-creates-acl-groups/8017/1 "2019-10-02T02:04:05Z")

</div>

**Moved from GitHub [ratel/135](https://github.com/dgraph-io/ratel/issues/135)**

_Posted by_ [danielmai](https://github.com/danielmai):

Steps to reproduce:

1. Run Dgraph cluster with ACLs enabled
2. Login as groot
3. Add a ACL group called “aGroup”
4. Query for the group with the CLI tool:

```auto
$ dgraph acl info -g aGroup                   
[Decoder]: Using assembly version of decoder

Running transaction with dgraph endpoint: localhost:9180
Current password for groot:
Login successful.
Unable to show info: The group "aGroup" does not exist.

```

Although Ratel says there’s a group, it’s not detected via the CLI tool.

@manishrjain and I dug into this a bit and we noticed that the group created via Ratel does not have dgraph.type set to Group for the aGroup node. So it does not exist according to the CLI.

---

<div class="post-metadata">

**Author:** ![diggy](https://yyz1.discourse-cdn.com/flex007/user_avatar/discuss.dgraph.io/diggy/32/3666_2.png) [@diggy](https://discuss.dgraph.io/u/diggy)\
**Post date:** [October 3, 2019, 1:33pm UTC](https://discuss.dgraph.io/t/acl-incorrectly-creates-acl-groups/8017/2 "2019-10-03T13:33:21Z")

</div>

[paulftw](https://github.com/paulftw) _commented_ :

Should be fixed, please re-open if not.

Root cause is internals of the ACL have never been documented, and type change is probably a recent addition, because Ratel support for ACL predates the type system

---

<div class="post-metadata">

**Author:** ![diggy](https://yyz1.discourse-cdn.com/flex007/user_avatar/discuss.dgraph.io/diggy/32/3666_2.png) [@diggy](https://discuss.dgraph.io/u/diggy)\
**Post date:** [July 11, 2020, 3:20am UTC](https://discuss.dgraph.io/t/acl-incorrectly-creates-acl-groups/8017/3 "2020-07-11T03:20:36Z")

</div>