Description of problem:

When OVN ACLs are applied to a port group they are essentially applied to every logical switch that contains ports that are part of the port group.

However, when displaying ACLs applied on a logical switch, ovn-nbctl only returns ACLs explicitly applied on the logical switch. This makes troubleshooting more complicated.

Version-Release number of selected component (if applicable):
Any.

How reproducible:
Every time.

Steps to Reproduce:
$ ovn-nbctl ls-add ls
$ ovn-nbctl lsp-add ls lsp1
$ ovn-nbctl pg-add pg1 lsp1
$ ovn-nbctl acl-add pg1 to-lport 2 udp allow
$ ovn-nbctl acl-add ls to-lport 1 ip drop

Actual results:
$ ovn-nbctl acl-list ls
  to-lport     1 (ip) drop
$ ovn-nbctl acl-list pg1
  to-lport     2 (udp) allow

Expected results:
$ ovn-nbctl --all acl-list ls
  to-lport     2 (udp) allow
  to-lport     1 (ip) drop