[Zope] Tools to assist setting access permissions and proxies

The fine grain control over access is both a virtue and a vice. | :-) Has anyone written a tool to examine a site (or a subtree of a site) and output current permission states? Even better would be a tool that would look at the site and generate the settings based upon a set of rules and policys. When a site gets complex keeping security setting correct is difficult.