title: Using Spring Security ACL - how to assign READ permission for an object to all users (registered and anonymous)?
body: <p>What is the best way to give all users (registered and anonymous) READ permission for an object?  I am working on a system where users can create items that are viewable by anyone, but only editable by the creator or admin users.  </p>
  
  <p>One solution that comes to mind is Spring gives unauthenticated users role ROLE_ANONYMOUS, I can change it to be ROLE_USER and give and also give it to all of my authenticated users, that way everyone is ROLE_USER.  Then all the publicly viewable entities would get READ permission inserted for ROLE_USER and from there I can use groups (GrantedAuthoritySid) to determine whether you have access or not (everyone would have access).  </p>
  
  <p>I am wondering if there a better way to achieve that without giving READ permission to ROLE_USER over each public object?</p>