update alf_child_assoc assoc join alf_node child on (child.id = assoc.child_node_id and assoc.is_primary = #isPrimary#) set child.acl_id = #newSharedAclId# where assoc.parent_node_id = #primaryParentNodeId# and ( child.acl_id is null OR child.acl_id = #optionalOldSharedAclIdInAdditionToNull# )