If your client has more than one person maintaining the site, you should consider providing role-based ACL. What is "role-based" ACL and why should you use it instead of the 1.5 approach of ACL?

This article describes how to setup ACL for various roles in a generalise fashion.