Major Description
Wildcard '*' characters in the ACL definition for acl.processing.mode of OR provide inappropriate access to the protected resource. Change to effective disregard wildcard acls by denying access for them. The fact that we are ORing them will result in the desired protection.