Also, ACL's can fail in three ways:
- You don't have the specified Roles
- You don't match the specified Conditions
- the specified Script fails or returns false..
I *believe* if an ACL fails a role check, it doesn't even bother looking at the conditions or the script. Observe this debug output to see what I'm talking about.
... That first X on the first record/problem/read evaluation was checking for necessary roles. It didn't find it, and didn't check or X the next two evaluations. If I'm right on that, it would explain why you're not getting any gs.logs (assuming you're in global scope).
For more info on that, you can check out my Visual Guide to ACL Troubleshooting
