diff --git a/config/alfresco/public-services-security-context.xml b/config/alfresco/public-services-security-context.xml
index 237cb168d5..d90fa292e1 100644
--- a/config/alfresco/public-services-security-context.xml
+++ b/config/alfresco/public-services-security-context.xml
@@ -113,6 +113,7 @@
         <property name="accessControlListDAO" ref="admNodeACLDAO"/>
         <property name="nodeDAO" ref="nodeDAO"/>
         <property name="maxItemBatchSize" value="${system.fixedACLsUpdater.maxItemBatchSize}"/>
+        <property name="numThreads" value="${system.fixedACLsUpdater.numThreads}"/>
         <property name="lockTimeToLive" value="${system.fixedACLsUpdater.lockTTL}"/>
     </bean>
     
diff --git a/config/alfresco/repository.properties b/config/alfresco/repository.properties
index 4b9cfb1a85..052455f90d 100644
--- a/config/alfresco/repository.properties
+++ b/config/alfresco/repository.properties
@@ -1117,6 +1117,8 @@ system.fixedACLs.maxTransactionTime=10000
 system.fixedACLsUpdater.lockTTL=10000
 # fixedACLsUpdater - maximum number of nodes to process per execution
 system.fixedACLsUpdater.maxItemBatchSize=100
+# fixedACLsUpdater - the number of threads to use
+system.fixedACLsUpdater.numThreads=4
 # fixedACLsUpdater cron expression - fire at midnight every day
 system.fixedACLsUpdater.cronExpression=0 0 0 * * ? 
 
diff --git a/source/java/org/alfresco/repo/domain/permissions/FixedAclUpdater.java b/source/java/org/alfresco/repo/domain/permissions/FixedAclUpdater.java
index e24b8cc8cc..370c4b0643 100644
--- a/source/java/org/alfresco/repo/domain/permissions/FixedAclUpdater.java
+++ b/source/java/org/alfresco/repo/domain/permissions/FixedAclUpdater.java
@@ -26,17 +26,21 @@
 package org.alfresco.repo.domain.permissions;
 
 import java.util.ArrayList;
+import java.util.Collection;
+import java.util.Collections;
 import java.util.HashSet;
 import java.util.List;
 import java.util.Set;
 import java.util.concurrent.atomic.AtomicBoolean;
 
 import org.alfresco.model.ContentModel;
+import org.alfresco.repo.batch.BatchProcessWorkProvider;
+import org.alfresco.repo.batch.BatchProcessor;
 import org.alfresco.repo.domain.node.NodeDAO;
 import org.alfresco.repo.domain.node.NodeDAO.NodeRefQueryCallback;
 import org.alfresco.repo.lock.JobLockService;
-import org.alfresco.repo.lock.LockAcquisitionException;
 import org.alfresco.repo.lock.JobLockService.JobLockRefreshCallback;
+import org.alfresco.repo.lock.LockAcquisitionException;
 import org.alfresco.repo.security.authentication.AuthenticationUtil;
 import org.alfresco.repo.security.authentication.AuthenticationUtil.RunAsWork;
 import org.alfresco.repo.transaction.RetryingTransactionHelper.RetryingTransactionCallback;
@@ -46,17 +50,20 @@ import org.alfresco.service.namespace.NamespaceService;
 import org.alfresco.service.namespace.QName;
 import org.alfresco.service.transaction.TransactionService;
 import org.alfresco.util.Pair;
-import org.alfresco.util.VmShutdownListener.VmShutdownException;
 import org.apache.commons.logging.Log;
 import org.apache.commons.logging.LogFactory;
+import org.springframework.beans.BeansException;
+import org.springframework.context.ApplicationContext;
+import org.springframework.context.ApplicationContextAware;
 
 /**
  * Finds nodes with ASPECT_PENDING_FIX_ACL aspect and sets fixed ACLs for them
  * 
  * @author Andreea Dragoi
+ * @author sglover
  * @since 4.2.7
  */
-public class FixedAclUpdater extends TransactionListenerAdapter
+public class FixedAclUpdater extends TransactionListenerAdapter implements ApplicationContextAware
 {
     private static final Log log = LogFactory.getLog(FixedAclUpdater.class);
     private static final Set<QName> PENDING_FIX_ACL_ASPECT_PROPS = pendingFixAclAspectProps();
@@ -64,6 +71,7 @@ public class FixedAclUpdater extends TransactionListenerAdapter
     public static final String FIXED_ACL_ASYNC_REQUIRED_KEY = "FIXED_ACL_ASYNC_REQUIRED";
     public static final String FIXED_ACL_ASYNC_CALL_KEY = "FIXED_ACL_ASYNC_CALL";
 
+    private ApplicationContext applicationContext;
     private JobLockService jobLockService;
     private TransactionService transactionService;
     private AccessControlListDAO accessControlListDAO;
@@ -71,7 +79,20 @@ public class FixedAclUpdater extends TransactionListenerAdapter
     private QName lockQName = QName.createQName(NamespaceService.SYSTEM_MODEL_1_0_URI, "FixedAclUpdater");
     private long lockTimeToLive = 10000;
     private long lockRefreshTime = lockTimeToLive / 2;
+
     private int maxItemBatchSize = 100;
+    private int numThreads = 4;
+
+    public void setNumThreads(int numThreads)
+    {
+        this.numThreads = numThreads;
+    }
+
+    @Override
+    public void setApplicationContext(ApplicationContext applicationContext) throws BeansException
+    {
+        this.applicationContext = applicationContext;
+    };
 
     public void setJobLockService(JobLockService jobLockService)
     {
@@ -104,161 +125,160 @@ public class FixedAclUpdater extends TransactionListenerAdapter
         this.lockRefreshTime = lockTimeToLive / 2;
     }
 
-    private static Set<QName> pendingFixAclAspectProps()
+    private class GetNodesWithAspects
     {
-        Set<QName> props = new HashSet<>();
-        props.add(ContentModel.PROP_SHARED_ACL_TO_REPLACE);
-        props.add(ContentModel.PROP_INHERIT_FROM_ACL);
-        return props;
-    }
+        private Set<QName> aspects;
+        private int workSize;
+        private GetNodesWithAspectCallback getNodesCallback;
 
-    private int findAndUpdateAcl(FixedAclUpdaterJobLockRefreshCallback jobCallback)
-    {
-        final Set<QName> aspects = new HashSet<>(1);
-        aspects.add(ContentModel.ASPECT_PENDING_FIX_ACL);
-
-        List<NodeRef> nodesToUpdate = getNodesWithAspects(aspects);
-        int processedNodes = 0;
-
-        // loop over results
-        for (final NodeRef nodeRef : nodesToUpdate)
+        GetNodesWithAspects(Set<QName> aspects)
         {
-            // Check if we have been terminated
-            if (!jobCallback.isActive.get())
-            {
-                if (log.isDebugEnabled())
-                {
-                    log.debug(String.format("Processing node failed %s. Job not active", nodeRef));
-                }
-                // terminate
-                break;
-            }
-            if (log.isDebugEnabled())
-            {
-                log.debug(String.format("Processing node %s", nodeRef));
-            }
-            final Long nodeId = nodeDAO.getNodePair(nodeRef).getFirst();
+            this.aspects = aspects;
 
-            try
-            {
-                transactionService.getRetryingTransactionHelper().doInTransaction(new RetryingTransactionCallback<Void>()
-                {
-                    public Void execute() throws Throwable
+            this.getNodesCallback = new GetNodesWithAspectCallback();
+            this.workSize = countNodesWithAspects();
+        }
+
+        int getWorkSize()
+        {
+            return workSize;
+        }
+
+        List<NodeRef> getNodesWithAspects()
+        {
+            List<NodeRef> nodes = transactionService.getRetryingTransactionHelper()
+                    .doInTransaction(new RetryingTransactionCallback<List<NodeRef>>()
                     {
-                        // retrieve acl properties from node
-                        Long inheritFrom = (Long) nodeDAO.getNodeProperty(nodeId, ContentModel.PROP_INHERIT_FROM_ACL);
-                        Long sharedAclToReplace = (Long) nodeDAO.getNodeProperty(nodeId, ContentModel.PROP_SHARED_ACL_TO_REPLACE);
-
-                        // set inheritance using retrieved prop
-                        accessControlListDAO.setInheritanceForChildren(nodeRef, inheritFrom, sharedAclToReplace, true);
-
-                        nodeDAO.removeNodeAspects(nodeId, aspects);
-                        nodeDAO.removeNodeProperties(nodeId, PENDING_FIX_ACL_ASPECT_PROPS);
-
-                        if (log.isDebugEnabled())
+                        @Override
+                        public List<NodeRef> execute() throws Throwable
                         {
-                            log.debug(String.format("Node processed ", nodeRef));
+                            getNodesCallback.init();
+                            nodeDAO.getNodesWithAspects(aspects, getNodesCallback.getMinNodeId(), null, getNodesCallback);
+                            getNodesCallback.done();
+
+                            return getNodesCallback.getNodes();
                         }
-                        return null;
+                    }, false, true);
+            return nodes;
+        }
+
+        int countNodesWithAspects()
+        {
+            final CountNodesWithAspectCallback countNodesCallback = new CountNodesWithAspectCallback();
+            int count = transactionService.getRetryingTransactionHelper()
+                    .doInTransaction(new RetryingTransactionCallback<Integer>()
+                    {
+                        @Override
+                        public Integer execute() throws Throwable
+                        {
+                            nodeDAO.getNodesWithAspects(aspects, 0l, null, countNodesCallback);
+                            return countNodesCallback.getCount();
+                        }
+                    }, false, true);
+            return count;
+        }
+    }
+
+    private class AclWorkProvider implements BatchProcessWorkProvider<NodeRef>
+    {
+        private GetNodesWithAspects getNodesWithAspects;
+
+        AclWorkProvider()
+        {
+            getNodesWithAspects = new GetNodesWithAspects(Collections.singleton(ContentModel.ASPECT_PENDING_FIX_ACL));
+        }
+
+        @Override
+        public int getTotalEstimatedWorkSize()
+        {
+            int workSize = getNodesWithAspects.getWorkSize();
+            return workSize;
+        }
+
+        @Override
+        public Collection<NodeRef> getNextWork()
+        {
+            return getNodesWithAspects.getNodesWithAspects();
+        }
+    }
+
+    private class AclWorker implements BatchProcessor.BatchProcessWorker<NodeRef>
+    {
+        private Set<QName> aspects = new HashSet<>(1);
+
+        AclWorker()
+        {
+            aspects.add(ContentModel.ASPECT_PENDING_FIX_ACL);
+        }
+
+        public String getIdentifier(NodeRef nodeRef)
+        {
+            return String.valueOf(nodeRef.toString());
+        }
+
+        public void beforeProcess() throws Throwable
+        {
+        }
+
+        public void afterProcess() throws Throwable
+        {
+        }
+
+        public void process(final NodeRef nodeRef) throws Throwable
+        {
+            RunAsWork<Void> findAndUpdateAclRunAsWork = new RunAsWork<Void>()
+            {
+                @Override
+                public Void doWork() throws Exception
+                {
+                    if (log.isDebugEnabled())
+                    {
+                        log.debug(String.format("Processing node %s", nodeRef));
                     }
-                }, false, true);
-            }
-            catch (Exception e)
-            {
-                if (log.isDebugEnabled())
-                {
-                    log.debug(String.format("Could not process node ", nodeRef), e);
+                    final Long nodeId = nodeDAO.getNodePair(nodeRef).getFirst();
+
+                    // retrieve acl properties from node
+                    Long inheritFrom = (Long) nodeDAO.getNodeProperty(nodeId,
+                            ContentModel.PROP_INHERIT_FROM_ACL);
+                    Long sharedAclToReplace = (Long) nodeDAO.getNodeProperty(nodeId,
+                            ContentModel.PROP_SHARED_ACL_TO_REPLACE);
+
+                    // set inheritance using retrieved prop
+                    accessControlListDAO.setInheritanceForChildren(nodeRef, inheritFrom, sharedAclToReplace,
+                            true);
+
+                    nodeDAO.removeNodeAspects(nodeId, aspects);
+                    nodeDAO.removeNodeProperties(nodeId, PENDING_FIX_ACL_ASPECT_PROPS);
+
+                    if (log.isDebugEnabled())
+                    {
+                        log.debug(String.format("Node processed %s", nodeRef));
+                    }
+
+                    return null;
                 }
-            }
 
-            processedNodes++;
+            };
+
+            AuthenticationUtil.runAs(findAndUpdateAclRunAsWork, AuthenticationUtil.getSystemUserName());
         }
-
-        if (log.isDebugEnabled())
-        {
-            log.debug(String.format("Nodes found %s; nodes processed %s", nodesToUpdate.size(), processedNodes));
-        }
-
-        return processedNodes;
-    }
-
-    public void execute()
-    {
-        String lockToken = null;
-        FixedAclUpdaterJobLockRefreshCallback callback = new FixedAclUpdaterJobLockRefreshCallback();
-        try
-        {
-            RunAsWork<Integer> findAndUpdateAclRunAsWork = findAndUpdateAclRunAsWork(callback);
-            lockToken = jobLockService.getLock(lockQName, lockTimeToLive, 0, 1);
-            while (true)
-            {
-                jobLockService.refreshLock(lockToken, lockQName, lockRefreshTime, callback);
-                Integer processed = AuthenticationUtil.runAs(findAndUpdateAclRunAsWork, AuthenticationUtil.getSystemUserName());
-                if (processed.intValue() == 0)
-                {
-                    // There is no more to process
-                    break;
-                }
-                // There is still more to process, so continue
-            }
-        }
-        catch (LockAcquisitionException e)
-        {
-            // already running
-        }
-        catch (VmShutdownException e)
-        {
-            if (log.isDebugEnabled())
-            {
-                log.debug("FixedAclUpdater aborted");
-            }
-        }
-        finally
-        {
-            callback.isActive.set(false);
-            jobLockService.releaseLock(lockToken, lockQName);
-        }
-    }
-
-    private RunAsWork<Integer> findAndUpdateAclRunAsWork(final FixedAclUpdaterJobLockRefreshCallback callback)
-    {
-        final RetryingTransactionCallback<Integer> findAndUpdateAclWork = new RetryingTransactionCallback<Integer>()
-        {
-            public Integer execute() throws Exception
-            {
-                return findAndUpdateAcl(callback);
-            }
-        };
-
-        // execute as system user to ensure fast, accurate results
-        RunAsWork<Integer> findAndUpdateAclRunAsWork = new RunAsWork<Integer>()
-        {
-            @Override
-            public Integer doWork() throws Exception
-            {
-                return transactionService.getRetryingTransactionHelper().doInTransaction(findAndUpdateAclWork, false, true);
-            }
-        };
-        return findAndUpdateAclRunAsWork;
-    }
-
-    private List<NodeRef> getNodesWithAspects(final Set<QName> aspects)
-    {
-        return transactionService.getRetryingTransactionHelper().doInTransaction(new RetryingTransactionCallback<List<NodeRef>>()
-        {
-            @Override
-            public List<NodeRef> execute() throws Throwable
-            {
-                GetNodesWithAspectCallback callback = new GetNodesWithAspectCallback();
-                nodeDAO.getNodesWithAspects(aspects, 1L, null, callback);
-                return callback.getNodes();
-            }
-        }, false, true);
-    }
+    };
 
     private class GetNodesWithAspectCallback implements NodeRefQueryCallback
     {
         private List<NodeRef> nodes = new ArrayList<>();
+        private long minNodeId;
+        private long maxNodeId;
+
+        void init()
+        {
+            nodes.clear();
+        }
+
+        void done()
+        {
+            this.minNodeId = maxNodeId + 1;
+        }
 
         @Override
         public boolean handle(Pair<Long, NodeRef> nodePair)
@@ -266,17 +286,40 @@ public class FixedAclUpdater extends TransactionListenerAdapter
             if (nodes.size() < maxItemBatchSize)
             {
                 nodes.add(nodePair.getSecond());
+                maxNodeId = nodePair.getFirst();
                 return true;
             }
             return false;
         }
 
+        long getMinNodeId()
+        {
+            return minNodeId;
+        }
+
         public List<NodeRef> getNodes()
         {
             return nodes;
         }
     }
 
+    private class CountNodesWithAspectCallback implements NodeRefQueryCallback
+    {
+        private int count = 0;
+
+        @Override
+        public boolean handle(Pair<Long, NodeRef> nodePair)
+        {
+            count++;
+            return true;
+        }
+
+        public int getCount()
+        {
+            return count;
+        }
+    }
+
     private static class FixedAclUpdaterJobLockRefreshCallback implements JobLockRefreshCallback
     {
         public AtomicBoolean isActive = new AtomicBoolean(true);
@@ -294,17 +337,54 @@ public class FixedAclUpdater extends TransactionListenerAdapter
         }
     }
 
+    private static Set<QName> pendingFixAclAspectProps()
+    {
+        Set<QName> props = new HashSet<>();
+        props.add(ContentModel.PROP_SHARED_ACL_TO_REPLACE);
+        props.add(ContentModel.PROP_INHERIT_FROM_ACL);
+        return props;
+    }
+
+    public int execute()
+    {
+        String lockToken = null;
+        FixedAclUpdaterJobLockRefreshCallback jobLockRefreshCallback = new FixedAclUpdaterJobLockRefreshCallback();
+
+        try
+        {
+            lockToken = jobLockService.getLock(lockQName, lockTimeToLive, 0, 1);
+            jobLockService.refreshLock(lockToken, lockQName, lockRefreshTime, jobLockRefreshCallback);
+
+            AclWorkProvider provider = new AclWorkProvider();
+            AclWorker worker = new AclWorker();
+            BatchProcessor<NodeRef> bp = new BatchProcessor<>(
+                    "FixedAclUpdater",
+                    transactionService.getRetryingTransactionHelper(),
+                    provider,
+                    numThreads, maxItemBatchSize,
+                    applicationContext,
+                    log, 100);
+            int count = bp.process(worker, true);
+            return count;
+        }
+        catch (LockAcquisitionException e)
+        {
+            // already running
+            return 0;
+        }
+        finally
+        {
+            jobLockRefreshCallback.isActive.set(false);
+            if(lockToken != null)
+            {
+                jobLockService.releaseLock(lockToken, lockQName);
+            }
+        }
+    }
+
     @Override
     public void afterCommit()
     {
-        Thread t = new Thread(new Runnable()
-        {
-            @Override
-            public void run()
-            {
-                execute();
-            }
-        });
-        t.start();
+        execute();
     }
 }
diff --git a/source/test-java/org/alfresco/repo/domain/permissions/FixedAclUpdaterTest.java b/source/test-java/org/alfresco/repo/domain/permissions/FixedAclUpdaterTest.java
index d8966ba918..114f401eca 100644
--- a/source/test-java/org/alfresco/repo/domain/permissions/FixedAclUpdaterTest.java
+++ b/source/test-java/org/alfresco/repo/domain/permissions/FixedAclUpdaterTest.java
@@ -28,8 +28,6 @@ package org.alfresco.repo.domain.permissions;
 import java.util.HashSet;
 import java.util.Set;
 
-import junit.framework.TestCase;
-
 import org.alfresco.model.ContentModel;
 import org.alfresco.repo.domain.node.NodeDAO;
 import org.alfresco.repo.domain.node.NodeDAO.NodeRefQueryCallback;
@@ -39,11 +37,12 @@ import org.alfresco.repo.security.authentication.AuthenticationUtil.RunAsWork;
 import org.alfresco.repo.security.permissions.impl.PermissionsDaoComponent;
 import org.alfresco.repo.transaction.AlfrescoTransactionSupport;
 import org.alfresco.repo.transaction.RetryingTransactionHelper;
-import org.alfresco.repo.transaction.TransactionListenerAdapter;
 import org.alfresco.repo.transaction.RetryingTransactionHelper.RetryingTransactionCallback;
+import org.alfresco.repo.transaction.TransactionListenerAdapter;
 import org.alfresco.service.ServiceRegistry;
 import org.alfresco.service.cmr.model.FileFolderService;
 import org.alfresco.service.cmr.repository.NodeRef;
+import org.alfresco.service.cmr.security.PermissionService;
 import org.alfresco.service.namespace.QName;
 import org.alfresco.util.ApplicationContextHelper;
 import org.alfresco.util.ArgumentHelper;
@@ -52,10 +51,13 @@ import org.junit.Test;
 import org.springframework.context.ApplicationContext;
 import org.springframework.context.ConfigurableApplicationContext;
 
+import junit.framework.TestCase;
+
 /**
  * Test class for {@link FixedAclUpdater}
  * 
  * @author Andreea Dragoi
+ * @author sglover
  * @since 4.2.7
  *
  */
@@ -68,6 +70,7 @@ public class FixedAclUpdaterTest extends TestCase
     private FixedAclUpdater fixedAclUpdater;
     private NodeRef folderNodeRef;
     private PermissionsDaoComponent permissionsDaoComponent;
+    private PermissionService permissionService;
     private NodeDAO nodeDAO;
 
     @Override
@@ -80,6 +83,7 @@ public class FixedAclUpdaterTest extends TestCase
         repository = (Repository) ctx.getBean("repositoryHelper");
         fixedAclUpdater = (FixedAclUpdater) ctx.getBean("fixedAclUpdater");
         permissionsDaoComponent = (PermissionsDaoComponent) ctx.getBean("admPermissionsDaoComponent");
+        permissionService = (PermissionService) ctx.getBean("permissionService");
         nodeDAO = (NodeDAO) ctx.getBean("nodeDAO");
 
         AuthenticationUtil.setFullyAuthenticatedUser(AuthenticationUtil.getSystemUserName());
@@ -160,62 +164,66 @@ public class FixedAclUpdaterTest extends TestCase
      */
     private int getNodesCountWithPendingFixedAclAspect()
     {
-        final Set<QName> aspects = new HashSet<>(1);
-        aspects.add(ContentModel.ASPECT_PENDING_FIX_ACL);
-        GetNodesCountWithAspectCallback callback = new GetNodesCountWithAspectCallback();
-        nodeDAO.getNodesWithAspects(aspects, 1L, null, callback);
-        return callback.getNodesNumber();
+        return txnHelper.doInTransaction(new RetryingTransactionCallback<Integer>()
+        {
+            @Override
+            public Integer execute() throws Throwable
+            {
+                final Set<QName> aspects = new HashSet<>(1);
+                aspects.add(ContentModel.ASPECT_PENDING_FIX_ACL);
+                GetNodesCountWithAspectCallback callback = new GetNodesCountWithAspectCallback();
+                nodeDAO.getNodesWithAspects(aspects, 1L, null, callback);
+                return callback.getNodesNumber();
+            }
+        });
     }
 
     @Test
     public void testMNT15368()
     {
+        // kick it off by setting inherit parent permissions == false
         txnHelper.doInTransaction(new RetryingTransactionCallback<Void>()
         {
             @Override
             public Void execute() throws Throwable
             {
-                // call setInheritParentPermissions on a node that will required async
-                AlfrescoTransactionSupport.bindResource(FixedAclUpdater.FIXED_ACL_ASYNC_CALL_KEY, true);
-                permissionsDaoComponent.setInheritParentPermissions(folderNodeRef, false);
+                permissionService.setInheritParentPermissions(folderNodeRef, false, true);
 
                 Boolean asyncCallRequired = (Boolean) AlfrescoTransactionSupport.getResource(FixedAclUpdater.FIXED_ACL_ASYNC_REQUIRED_KEY);
-                if (asyncCallRequired != null && asyncCallRequired)
-                {
-                    // check if there are nodes with ASPECT_PENDING_FIX_ACL
-                    assertTrue(" No nodes with pending aspect", getNodesCountWithPendingFixedAclAspect() > 0);
-                    AlfrescoTransactionSupport.bindListener(new TransactionListenerAdapter()
-                    {
-                        @Override
-                        public void afterCommit()
-                        {
-                            // start fixedAclUpdater
-                            Thread t = new Thread(new Runnable()
-                            {
-                                @Override
-                                public void run()
-                                {
-                                    fixedAclUpdater.execute();
-                                }
-                            });
-                            t.start();
-                            try
-                            {
-                                // wait to finish work
-                                t.join();
-                            }
-                            catch (InterruptedException e)
-                            {
-                            }
-                        }
-                    });
-                }
+                assertTrue("asyncCallRequired should be true", asyncCallRequired);
+
                 return null;
             }
-        });
-        // check if nodes with ASPECT_PENDING_FIX_ACL are processed
-        assertTrue("Not all nodes were processed", getNodesCountWithPendingFixedAclAspect() == 0);
+        }, false, true);
 
+        // run the fixedAclUpdater until there is nothing more to fix (running the updater
+        // may create more to fix up)
+        txnHelper.doInTransaction(new RetryingTransactionCallback<Void>()
+        {
+            @Override
+            public Void execute() throws Throwable
+            {
+                int count = 0;
+                do
+                {
+                    count = fixedAclUpdater.execute();
+                }
+                while(count > 0);
+
+                return null;
+            }
+        }, false, true);
+
+        // check if nodes with ASPECT_PENDING_FIX_ACL are processed
+        txnHelper.doInTransaction(new RetryingTransactionCallback<Void>()
+        {
+            @Override
+            public Void execute() throws Throwable
+            {
+                assertEquals("Not all nodes were processed", 0, getNodesCountWithPendingFixedAclAspect());
+                return null;
+            }
+        }, false, true);
     }
 
     private static class GetNodesCountWithAspectCallback implements NodeRefQueryCallback