Basic ACL (permission checking) functionality for Meteor