"Private instance" and ACL

[sandman7920]

🐞 Describe the bug
If we have auth-default-access: "deny-all" and ACL for user test test* rw and test * ro
It seems like the read-only access to topic * permission is being applied before the read-write access to topic test*

💻 Components impacted
ACL publish API

💡 Screenshots and/or logs

🔮 Additional context

[binwiederhier]

Fixed in #917. Thank you!