Customer-facing ACLs