Added some comments on the different lsteners, commented out a few ones
that seemed useless now.
Commented out the global-method-security element: this kind of element
should be handled in tgol-security.xml instead.
Added acl-context.xml that contains all ACL specific configuration and
added its inclusion in tgol-security.xml.

Also changed the url-intercept patterns to use expression (for
coherence's sake).
Added generic methods findAllIndexes and findByIndexes on GenericDAO and
their generic implementation in AbstractJPADAO.

Also added minor optimization in AbstracJPADAO by caching the name of
the Entity class.
Generic implementation of #findAll now relies on
GenericDAO#findAllIndexes and GenericDAO#findByIndexes to enable using
of ACLs on the DAO.
Added missing import and "fixed" (by using annotation to ignore) a
warning.
Added maven dependency to spring-security-core to enable @PostFilter
security annotation on methods.
Used @PostFilter ACL-based filtering on ContractDAO#findAllIndexes :
user can only "find" all contract he/she has read rights on.
Replaced calls to AbstractJPADAO#getEntityClass().getName() by calls to
AbstractJPADAO#getEntityClassName()
Broke the User-Contract relationship
/!\ Warning: web-app projects at this points do NOT compile!!! /!\
Refactored TanaguruOrchestrator so that it takes Act and user mail as
inputs and returns the same act with its audit filled and its status
updated. This way, it doesn't have to care about current user or whoever
launched/created the Act, and the ACL rights can be cleanly handled in
the caller (AuditLauncherController).

ACLs right not yet managed, but TODO's show where code about that have
to be.
Deleted unsued factory class (impl is created as a bean by Spring)
Changed comparison of user Id for an actual use of ACLs in
#isUserAllowedToDisplaySetUpPage .
Changed #isAdmin to support user with multiple roles.
Pulled up the responsibility of determining wether current user is a
guest from the Factory to the Controller.
AuditDataHandlerController#isUserAllowedToDisplayResult now takes an Act
as input parameter (was an Audit) and uses ACL.
Fixed callers accordingly.
Changed AclService to MutableAclService, enabling creation/modification
functions of ACLs. Added a getter for sub classes to use.
Refactored controlllers a bit to pull acl service and related
convenience methods to the top level AbstractController class.
Fixed some test (some TODOs remaining though).
Catched the NotFoundException that might be thrown when no ACLs are
found. Also added a TODO to remind myself to use the RoleHierarchy when
retreiving SIDs.
#getCurrentSid now uses and autowired role hierarchy to get ALL granted
authorities (role hierarchy created in acl-context.xml). Moved
aclService autowire directly on the private field (as per Spring
documentation), removing the unneeded setter.
All Acts created now have some default ACLs created with them
(precisely: current user and ROLE_ADMIN are given all rights).