Basic ACL code to ensure that users are only allowed to use Apps permitted by their role