Role and user model snippet for ACLs