1) only authenticated users can write (%users default to 0)

2) authenticated users can only delete their own stuff ($level defaults to 1)

3) open clicks on graphs in dashboards in new target windows
hide all DS'es which don't have any values