Went to work
Discovered power was out.
Sat in dark for two hours.
I'm aware that my website's probably borked, I was in the middle of a code change before I got called to fix the mail server, and I've not got the energy to complete the code right now.
Personal website now mainly back online (only albums were off); captions not working and privs list needs conversion to ACLs
The new heavyweight privs system (with ACLs polymorphically linked to secured items) seems to work, but I'm still not convinced of its elegance.
... although checking privs for "current user" instead of "any user" might be a slight improvement ...