if isObjectInACLGroup ( "user." .. accountName, aclGetGroup ( "Admin, Moderator" )
"Admin, Moderator" will be taken as 1 group
so
split them out
if isObjectInACLGroup ( "user." .. accountName, aclGetGroup( "Admin") or isObjectInACLGroup ( "user." .. accountName, aclGetGroup( "Moderator")
hope this helps