#3 - Users now have ACL properties for relationships with 1) other users 2) role strings 3) other objects (not used yet). This also moves table logic to a mix-in, admin bar content dynamically generated.