How implement ACL with REST authenticate

auth method works fine, but how implement a ACL?

[color="#006400"]/* Moved from "General Discussions" to "REST" */[/color]