Removed ACL checks from the database layer as they make more sense implemented in the controller layer(s).