It doesn't make sense.  As I said, I was only looking at my immediate 
need, which is limited.



The only thing that I can think would make sense is to have each 
object be expandable and then have each permissible entity (All 
Authenticated Users/Guests/Individual Users/Groups) be listed if they 
have permissions assigned.



And then maybe be able to apply filters - Show all Authenticated Users 
access for all objects - Show all Guest access - Show all Individual 
Users access

I'm open to hearing from others but I don't think this is a good idea. 
If we're going to show the All Users perms, why not Guests too? Etc... 
I understand this is a convenience feature for you (avoiding clicks), 
but I don't think there's defensible logic to the choice of which 
information to display, for the general case...

Sorry - tunnel vision.  Immediate need is to see what the permissions 
for All Authenticated Users are for each object.  I was overlooking 
the infinite combinations possible with Guest, Individual Users, and 
Groups...

This doesn't make sense to me. You can have a (theoretically) infinite 
number of different permissions set on an object. Displaying them all 
would make the tree huge and likely unusable.



Maybe I'm not understanding what you're asking for, though?

When you are in the Administration -> Permissions screen, you can see 
what items have permissions set on them.  However, unless you click on 
the element, you can't tell what permissions are set on the element.   
It would be helpful to have that information displayed along with the 
element name.  That would allow me to quickly confirm, for instance, 
that all my readonly LDAP address book sources are Show/Read, without 
having to click on each and every entry.