Several people have commented on needing better change control for access lists. This is along those lines. I would like for snippets, which is how we currently manage ACLs, to have a way to have a comment for each change and for that to make an entry into an event log. The logs should show the comment, the change and the user who made them. In addition, there needs to be some way to keep these historical changes in the snippets or whatever is used to manage the ACLs.
