Show source of privilege

[0xdabbad00]

Let's say this tool has told you that a user has some unused privilege. The next thing you'll want to know is why the user has that privilege in the first place, especially if there is potentially a condition or just if this user is a member of many groups and this is due to an attached policy within that group, or if the privilege was granted with wildcards which will make it tougher to grep for. So we should know the source of these privileges.

[jcaxmacher]

This would be a killer feature that I would love to pitch in on. I imagine it will require quite a bit more bookkeeping when building up the lists of allowed actions. If I were to start working on this, where should I begin to make sure the direction is desirable and no in-flight work is re-done?

[kmcquade]

Samesies, I'd like to help