anchor.diff:                      <admin:oneConfigEntry entry="${command.conf['esbUrl'].property}"/>
                       <admin:oneConfigEntry entry="${command.conf['esbWSUrl'].property}"/>
                       <admin:oneConfigEntry entry="${command.conf['wsUsername'].property}"/>
  -                    <admin:oneConfigEntry entry="${command.conf['wsPassword'].property}"/>
  +                    <csmauthz:accesscontrol objectPrivilege="gov.nih.nci.cabig.caaers.tools.configuration.Configuration:UPDATE">
  +                    	<admin:oneConfigEntry entry="${command.conf['wsPassword'].property}"/>
  +                    </csmauthz:accesscontrol>
                       <admin:oneConfigEntry entry="${command.conf['esbLogLocation'].property}"/>
                       <admin:oneConfigEntry entry="${command.conf['studySyncDelay'].property}" cssClass="validate-WHOLENUMBER"/>
                   </div>
  
positive.code:         	</ul>
      	</div>
  
  
          
      <form:form action="${action}" cssClass="standard">
      	<input type="hidden" name="CSRF_TOKEN" value="${CSRF_TOKEN }"/>
          <chrome:box title="Configure caAERS" autopad="true">
  
negative.code:     <script type="text/javascript" language="javascript">
          jQuery(function() {
              jQuery( "#ctabs" ).tabs({cookie:{expires:1}});
              var readonly = true;
      	    <csmauthz:accesscontrol objectPrivilege="gov.nih.nci.cabig.caaers.tools.configuration.Configuration:UPDATE">
      	    	readonly = false;
      	    </csmauthz:accesscontrol>
      	    if(readonly) {
      	    	jQuery( "input" ).attr('disabled', 'disabled');
      	    }
          });
      </script>
      <script>
  