An ACL intended for use with express-resource.