ACL
We need to restrict access to different parts of the site based on the user's status.
User
- view own user profile
- edit own user profile
- view messages received
Owner
- list all users
- view user profiles
- edit all user profiles
- view owner profile(blurb)
- edit owner profile(blurb)
- view messages sent and received
Admin
- list all users
- view all users profiles
- edit all user profiles
- view all owner's profiles(blurb)
- edit all owner's profile(blurb)
- view all messages sent and received