ACL bootstraping and user controller