JavaScript ACL Implementation