Add ACL for message

Make sure that a message can only be modified by the two users