Add support to grant acl permission to access an individual resource.