Moved buildAllRights() into DAO so that security entities work with ETOs