added ACL to controller, view and layout scopes