ACL at work: how to control user permissions