Access Control List

**DO NOT MERGE**

See the documentation commit for explanations