Return from getACLRoles when contactID is null