modularized security statics helpers
added "operationAuth" to show object
added operation show to test showobject