I don't think ACLs were meant to contain 7000 entries. If you are assigning the same permissions to a large set of users, you should define a group containing all of them and then add the group to the ACL. Matt