Tinkertool System, the shareware utility not its freeware older sibling Tinkertool, has IMO the best facilities for creating and managing ACLs.

If we knew what it was we were doing, it wouldn't be called research, would it?

— Albert Einstein