added client side acl
changed using edge to connect user to domain object