Create a Security class to run your ACL logic.
<?php
namespace Plugins;
use Phalcon\Events\Event;
use Phalcon\Mvc\Dispatcher;
use Phalcon\Acl;
use Phalcon\Acl\Role;
use Phalcon\Acl\Resource;
use Phalcon\Acl\Adapter\Memory as AclList;
class Security extends \Phalcon\Mvc\User\Plugin
...
