Extension for building a flexible Access Control List (ACL) system within CKAN. Provides role-based permission management with 3 default roles (anonymous, user, sysadmin) and support for custom role definitions. Allows assigning roles to users either globally or scoped to specific organizations. Features include comprehensive permission configuration UI, role assignment management interface, and extensible architecture for custom authorization logic. WARNING: Still under development and not ready for production use.