open access level control (ACL). thrift interface