Changed the permission grant page to use the new 'party_search' widget which allows to search for the party to grant permission to within the form, and to display the privilege hierarchy in a html tree, to convey visually the information about privilege inheritance. This includes a big hack to build the hierarchy in tcl in the oracle version, since it can't be queried directly (join doesn't like connect by in 8i).
moving the password question parameters to acs-kernel. Updating parameter::get calls in local-procs to always provide a package_id (either current subsite or acs-kernel)