use Acl rather than a new field in User model