How to implement Custom spring security acl?
<p>I'm developing an Application using Spring. In Access Control Access section I want to use Spring Security Acl (I'm new at Acl). I want to implement ACL in my application base on 2 points:</p>

<ol>
<li>Application should has five permissions, <code>read</code>, <code>create</code>, <code>modify</code>, <code>delete</code> and <code>Administrator</code>.</li>
<li>Permissions be hierarchy, When a user has <code>create</code> permission, it should be able to <code>read</code>, Or when it has <code>modify</code> permission, it should be able to <code>read</code>, <code>create</code> and <code>modify</code> and etc.</li>
</ol>

<p><strong>Is it possible? How?</strong></p>

<p><strong>update</strong>:<br>
My application is base on Spring MVC RESTFUL. When a user wants to modify own information, he send some json data with Ajax. An example of json data is as follow:</p>

<pre><code>{
  "id": 1,//user Id
  "name": "my name",
  "password": "my password",
  "email": "email@email.com",
   ...
}
</code></pre>

<p>Now, a malicious user can login to own account. This user can <code>modify</code> its data like all other users. Before he send data, change his id, and <code>modify</code> another account user information. I want to use ACL to prevent this Subversive work. And user can get some access to other that others can modify his info.</p>