When changing the ACL of a database that is part of the Domain Indexer, a document in that database must also be changed. The Domain Indexer does not update the index files of a database (including ACL information) unless a document has been modified, added or deleted.
There is a similar problem when updating database categories in a database. All documents that utilize the change to the category must be modified in order for their index entry to be updated.