Pulled up the responsibility of determining wether current user is a
guest from the Factory to the Controller.
AuditDataHandlerController#isUserAllowedToDisplayResult now takes an Act
as input parameter (was an Audit) and uses ACL.
Fixed callers accordingly.