Implement a barebones ACL functionality