2007-01-14 14:38:58 UTC
I think that a two fold approach is required.
1 - A simple no nesting chart of access style thing for simple implimentations
2 - An XML tree based engine that sits in the same API.
The effect of this is two fold. Work can continue but first a carefull mapping of the required API must be created.
A basic user system and auth tester have been written and some examples should be available soon.