https://www.mageworx.com/blog/2016/07/adding-more-flexibility-to-magento-access-control-lists/