...
replace the web services api. We will still have a business layer that talks to the ECM api. UI will talk to the business layer.
choose a standard to follow, jsr 170 or something else
choose a standard, generic permission model
how to organize content in hierachy