added a grant method to role for setting ACL