It worked particularly well for Pyramid with it's resource hierarchy object-model. The ACL would cascade down the tree and as it was traversed it could pattern match the permissions against the tree-node acl.

I actually think the model it's better suited to a functional language. I'm working on a similar extension to the Haskell snap framework.