If a new object is created, it doesn't get an object ID until setRequiredFieldsIfNeeded. This means that any Parse.Cloud.beforeSave(Parse.User triggers won't be able to any ACL work using ...