Thanks Peirre for your help. Things are progressing nicely now.
Now have a problem with decorators.xml being overwritten by the copy in
app-personality. In $MY_PROJECT/src/webapp/WEB-INF i have a copy of
decorators.xml, and at one time I thought that "overruled" the copy from
app-personality. I also have
$MY_PROJECT/src/webapp/personality/misc_files_here, and all of them get
copied to the right place. Am I dreaming this? I've dug through
plugin.jelly, but didn't come up with an answer.
BTW, I think app-security has been deprecated in favor of a console type
manager for security, last I recall.