Create basic acl framework

Fixes #265
Just tightening up these requests