Simple ACL with support for groups and roles with a centralalized object.