Server-side ACL filtering without affecting CouchDB native API can be achieved using https://github.com/ermouth/covercouch