make ACL a fluent interface