Creating an ACL for either a user or a group