Queries on shared data do not work for direct ACLs

[dvstans]

If user 'A' shares a record with user 'B' by setting an ACL on the record directly, that record will show up in the list of shared data and collections for user 'A'; however, if user 'A' runs a query over data shared by user 'B', the record will not be found. This is due to how the query (in AQL) is constructed where collections are used as a filter for returned results. Either querying records shared directly should be supported, the UI modified to indicate these constraints, or direct ACLs be removed.