than the query itself

ACL checks were not properly supported for tables used in CTE
specifications. This patch fixes the problem.