https://www.ask-sheldon.com/implement-acl-access-control-list/