Fixed bug in Spring Security which did not apply the role hierarchy when
determining whether a user was allowed to make changes to ACE's, audit,
or change ownership of an object.