diff --git a/java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/AccessControlStoreImpl.java b/java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/AccessControlStoreImpl.java
index 92a07096d1c..56fa1d3ac84 100644
--- a/java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/AccessControlStoreImpl.java
+++ b/java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/AccessControlStoreImpl.java
@@ -414,11 +414,11 @@ public class AccessControlStoreImpl implements AccessControlStore {
                     }
                     userGroupToOwnership.remove(effectiveUserGroup);
                 }
-
                 Set<AccessControlListAnnotation> knownACLEntries = userGroupToAccessControlListAnnotation
                         .get(effectiveUserGroup);
                 if (knownACLEntries != null) {
                     for (AccessControlListAnnotation acl : knownACLEntries) {
+                        acl.getAnnotation().setPermissions(effectiveUserGroup, Collections.emptySet());
                         internalRemoveUserGroupToACLMapping(effectiveUserGroup, acl);
                         mongoObjectFactory.storeAccessControlList(acl);
                     }