catalog: Complex ACL implementation.