acl definovane v neonu pre modularni aplikaciu

Caute viete mi poradit? Mam modularnu aplikaciu, kazdy modul ma svoj config.neon, a kazdy ma svoje konf. nastavenia, ide mi o to ze superadmin ma vsetky opravnena, a potom kazdy modul bude mat svojho admina [forumadmin] a tomu by som chcel nastavit vsetky opravnenia len na modul Forum: da sa to nejako realizovat, alebo je vobec vhodna tato cesta?

- allow(forumadmin, 'Form:*', ::constant(Nette\Security\Permission::ALL)))

BaseModule [config.neon]
	ForumModule [config.neon]
	CnsModule [config.neon]

// BaseModule
services:
	authorizator:
		class: Nette\Security\Permission
		setup:
			- addRole(guest)
			- addRole(registered, guest)
			- addRole(superadmin)
			- allow(superadmin, ::constant(Nette\Security\Permission::ALL), ::constant(Nette\Security\Permission::ALL))

//ForumModule
services:
	authorizator:
		class: Nette\Security\Permission
		setup:
			- addRole(forumadmin)
			- addResource('Form:Front:Default')
			- addResource('Form:Admin:User')
			- allow(registered, 'Form:Front:Default', ::constant(Nette\Security\Permission::ALL))
			- allow(registered, 'Form:Admin:User', 'edit'))
			- allow(forumadmin, 'Form:*', ::constant(Nette\Security\Permission::ALL)))