Bugger it. Here's the current shape of the new security implementation. Still to do: . call the security funcs from cgi and mailgw . change shipped templates to include correct initialisation and remove the old config vars ... that seems like a lot. The bulk of the work has been done though. Honest :)

<tr>
  <td>
    <property name="name">
      <display call="link('name')">
    </property>
  </td>
  <td>
    <property name="klass">
      <display call="plain('klass')">
    </property>
  </td>
</tr>