acl is a list of allowed and disallowed actions for different user types (normal,admin,moderator,[...]) you can script functions which only work for admins,moderators or whatever group of people you want to have. you could also add a "trusted users" list for example, and only make them able to votekick others. the possibilities are up to your imagination. the only thing you'll have to use is hasObjectPermissionTo.