Gregor,
most of the open bugs in the SDM are open because the could not be reproduced and are likely problems of a different nature.
The seperate login pipeline mentioned in the SDM is scheduled to be removed in 4.7. Audits are a know sore spot and haven't received much attention. Please log all bugs in the https://openacs.org/bugtracker/openacs/.
SiteWide search has more or less be neglected in favor of the OpenFTS based search.
/Bart
