[IMP] ACL in HTTP API only for managers
[IMP] Add all Emails to allowed list