Index: oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/AuthorizationContext.java
IDEA additional info:
Subsystem: com.intellij.openapi.diff.impl.patch.CharsetEP
<+>UTF-8
===================================================================
--- oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/AuthorizationContext.java	(revision 1672257)
+++ oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/AuthorizationContext.java	(revision )
@@ -47,7 +47,11 @@
     @Override
     public boolean definesContextRoot(@Nonnull Tree tree) {
         String name = tree.getName();
-        return POLICY_NODE_NAMES.contains(name) || REP_PERMISSION_STORE.equals(name);
+        if (POLICY_NODE_NAMES.contains(name)) {
+            return NT_REP_ACL.equals(TreeUtil.getPrimaryTypeName(tree));
+        } else {
+            return REP_PERMISSION_STORE.equals(name);
+        }
     }
 
     @Override