Dear Anton, after create new ACL and apply it to user the DEFAULT ACL still remains and not changed to new one.
Please note that when set “Default ACL Registration” as new ACL that created or change it through DB, new ACL applied to user but if you change any field in “inc=core_user&route=user_config” or create user manually the ACL changed to “DEFAULT” automatically.