Use ACL service provider to get user's ACL