anchor.diff:                          <admin:oneConfigEntry entry="${command.conf['caExchangeNonGridUrl'].property}"/>
                           <admin:oneConfigEntry entry="${command.conf['caExchangeUrl'].property}"/>
                           <admin:oneConfigEntry entry="${command.conf['caExchangeNonGridUserName'].property}"/>
  -                        <admin:oneConfigEntry entry="${command.conf['caExchangeNonGridPassword'].property}"/>
  +                        <csmauthz:accesscontrol objectPrivilege="gov.nih.nci.cabig.caaers.tools.configuration.Configuration:UPDATE">
  +                        	<admin:oneConfigEntry entry="${command.conf['caExchangeNonGridPassword'].property}"/>
  +                        </csmauthz:accesscontrol>
                       </div>
                   </c:if>
                   <div id="tabs-4">
  
positive.code:                     <admin:oneConfigEntry entry="${command.conf['smtpProtocol'].property}" options="${command.emailProtocols}"/>
                      <admin:oneConfigEntry entry="${command.conf['smtpSSLEnabled'].property}"/>
                      <admin:oneConfigEntry entry="${command.conf['smtpUser'].property}"/>
                      <admin:oneConfigEntry entry="${command.conf['smtpPassword'].property}"/>
                      <admin:oneConfigEntry entry="${command.conf['systemFromEmail'].property}"/>
                  </div>
              </div>
  
negative.code:     <script type="text/javascript" language="javascript">
          jQuery(function() {
              jQuery( "#ctabs" ).tabs({cookie:{expires:1}});
              var readonly = true;
      	    <csmauthz:accesscontrol objectPrivilege="gov.nih.nci.cabig.caaers.tools.configuration.Configuration:UPDATE">
      	    	readonly = false;
      	    </csmauthz:accesscontrol>
      	    if(readonly) {
      	    	jQuery( "input" ).attr('disabled', 'disabled');
      	    }
          });
      </script>
      <script>
  