Fleshes out Acl checks in NoteFoldersController.