Exposed API ACL calls with get_dataset_acl, add_dataset_acl, and add_dataset_acl_recursive (this allows you to pass an acl and a catalog id and set this acl on all underlying datasets)