base NEO models and fields done
ACL management via resource done. not tested
some refactoring plus fake objects and resources added to the permissions module
couple of tests for ACL
test get acl passed