I am responsible for manageing filesystem permissions on bunch of a SMB/CIFS shares in a larger company. The NTFS allows me to add entries to the access control lists (ACLs), but I cannot attach background information.
All permissions have a reason. For example, my superior ordered me to give somebody from another department access to a folder. Currently, I am logging this kind of "access justification" in a Word document. Once in a while, I go through this document and compare it to the current ACLs, folder by folder.
Is there a better way to do this?
There should be a tool with a nice GUI where I can store the target ACL entries along with a link, ticket number or comment. The tool should be able to assist with comparing the target state with the real ACLs on the share(s). Bonus: It can run pre-defined test cases.