Has anyone attempted to use the API to create a custom user/role manager, kind of like this guy did for K2 2003: http://k2underground.com/forums/thread/14599.aspx?

Is there any documentation out there for using the SecurityManagementAPI for blackpearl?  There is no reference to it in the SDK documentation...

On the surface, it seems simple enough - it provides Add, Delete and Get methods for users and roles but I have a number of questions on how to actually use those methods.  For example, you need to provide either an 'Application' or 'Object' when getting a list of users or roles... what is an application or object in this context?