Added navigation ACL, guest role is now a leaf