Hi @jesper ,
I think what you’re asking is why can a client’s queue attract messages from topics that the ACL profile doesn’t allow them to subscribe to?
If that is indeed your question it is b/c the queue itself has topic subscriptions which attract messages and then client-usernames with Consume (or higher) access can consume from it. The ACL profile disallowing topic subscriptions is only applied if the client-username is trying to subscribe directly to the topic without a queue.
If you meant to ask something else please clarify, but I hope that helps!