Limiting attributes through ACL