ACLs are for controlling access to table records, not to update records. I just set my user preference named 'rowcount' from 100 to 200 and it works. I login as admin and haven't tested for any other user. The record I updated is in the sys_user_preference table.