You can also use SLAPI for ACL plugins. In the plugin initialization function, you should register a function for SLAPI_PLUGIN_ACL_ALLOW_ACCESS, eg:
Been there done that :-)
-- Roland