do not rely on zope.conf settings in Authorization.py only refresh when visible in graphPanel.js