Yes, we do use ```setfacl```, 
However there are other different approaches for that, see: 
https://github.com/ezsystems/ezpublish-community/blob/master/INSTALL.md#install-all-components

Regarding the folder permissions is just for testing proposes, to use ACL we also need to install it, but this could be an idea.

Ideas?