User role, security, dynamic menu/shortcut
- DB: trace wrong query
- Manage user role
- Dynamic menu: page display/shortcuts according to user role
- script injection from back-end to front-end
- delete session page