+ acl access level/usergroup
+ jform token
+ prefix/sufix ajax response
+ component call