Fix for privilege escalation bug #825

This rechecks all ACLs a second time before the template is called,
avoiding similar problems in the future.

darcs-hash:20060606182742-7ad00-375c7989c8357c8a051b4966d06dbfde356bedb5.gz