PLFM-1969: ACLs for Submissions; PLFM-2015: READ_PRIVATE_SUBMISSION permission