Permissions Profiling

[Ryan Moriarty]

I've been asked to do a review of user permissions in our OFBiz
installation. Is there any good method (besides searching through the code
base one-by-one) of determining what services and screens a user has access
to, given a certain SecurityPermission?  Perhaps XPath queries against
service definitions and implementations? If anyone else has done this and
has ideas, I would appreciate the input.