An access control list middelware