Refactor: extract acl setting code as a mixin (OMS-336)