I'm looking for a tool that will help maintain security settings, having been burned a couple of times. What I need is: 1. A tool to traverse a site and build a database of security settings that must be set for each of the various roles. Ideally this would remove redundancies and, perhaps, raise warnings when settings look strange. 2. A tool to apply said database to a site which is similar but, perhaps, not identical in structure--that is, some extra folders(and enclosed material) might appear in one site and not in another. 3. It would be nice if the security settings database could be read and edited off-line so they could be reviewed and corrected as a unit. 4. It has to be able to handle proxies. 5. It has to be able to handle roles beyond the usual Anonymous, Authorized, Manager, and Owner. It's OK to demand that both sites have the same user defined roles. Anyone done anything like this?