Implement proper ACL checks and suid permission

Placeholder, not finished yet.
Okay. By the way, I'm unable to get anonymous access working. Have you exercised this functionality yet?