At the time, the "on delete cascade" was added to acs_permissions, as it looks to me, don did not provide an upgrade script. There was as well a non-conforming naming of of the constraints "...on_what_id" vs. "...object_id", which was consolidated by [1] also for old installations.