Rewrote the ACL, not finished tho, going to base it on dbconfig->acl instead.
Rewrote the ACL, a bit better - but not perfect...