* Refactor some acl grant user_id code and run through the full suite of acls
Accessing a non-constant global from another module is tricky, as the import binds to the original object. Rebinding the name in the original module does not change it in importers. Use a getter as a quick workaround.