See the SECURITY in /var/www/html/phpgroupware/phpgwapi/doc