ACL: read perm -> hidden; no perm -> viewable