[Refactoring] Extract ACL config to separate xml
Use role hierarchy also on web/http security level
Merge pull request #38 from buehner/role-hierarchy

Enable role hierarchy on web/http security level