ticket-3723, ACL method to check if aco is inherited from its parent

My first contribution - please be gentle ;)

No tests and only for DbAcl yet. Perhaps someone could take this as a
starting point.