Yes, Christopher, as an admin I also hate be in the scenario that you have to check the group, only to close, reopen the window. I though can foresee situations where one forgets the tab is open --- as you suggest --- and then the window gets some unintended data entered through errant keystrokes. Something so critical, to me, seems best to be a deliberate open and close.

How would you guard against a power user with 20 tabs or say ten window groups open, then managing a DB who forgets the tab is open? Then someone else makes a change to the DB ACL while the power user's ACL window is open, you increase the change of an ACL rep/save conflict probability.

Need to understand it a bit better.

I agree with both of you. Yes, there is need for a better (easier) management for ACL. Could save us loads of time. When you show a "limitation" like this to a non-Domino admin he/she just laughs at you.

I think easy-to-use interfaces should not be limited to end-users. It's not because we are admins and know commands and stuff (;-) that we can't or shouldn't reduce the time spent on such things. But I can also follow Bill's point. It means it also has to remain secure and avoid overhead on an other side.