[Security400] Documenting / Managing iSeries security

[CWilt@xxxxxxxxxxxx]

I'm beginning to take the first steps toward securing our home grown
application.

How do you document / manage security?  Working at larger company is new for
me.  A paper-based or even Excel-based matrix is going to quickly become
unwieldy.

At minimum, I'm thinking I need some programs that use commands and/or APIs
to populate some data files along with a front end that allows some drill
down capabilities.

At maximum, I'm thinking I need a whole new application to maintain the
security data files.  When changes are made via the application, the
appropriate OS/400 security command would be invoked to actually change the
security in use.


Are there any tools out there for this task?  iSeries specific would be
nice, but even non-iSeries may be useful.  Even links to documents or web
sites discussing the task would be helpful.  I've done some googling trying
to find something, but so far have failed to turn up anything useful.


Should I just start rolling my own?


Thanks,
Charles Wilt