I'm working on access control system and on analysis tools for reasoning on it. In A.C. system based on policy, think about XACML specifications, the overall behaviour of the system cannot be clearly predict in case of multiple policies, also maybe conflicting.
Thus, my question is, from a developer side or a security system engineer, which are the main features that an analysis tool must have to help policy developing?
There are many example about change-impact analysis, properties verification, ..., but many of them seems to not be used in real application. Which are the real needs of security professionals?