Fixed bug where wrong role was being attached to asset
We now return empty ACLs when a user requests an asset from a project they don't have access to
Merge pull request #19 from stilesb/buttoning-up-compatibility

Fixed bug where wrong role was being attached to asset