acl:        @permission.acl.map { |entry|
          entity = entity_decoration(entry)
          if entity.blank?
            nil
          else