I havent been able to find it, but how would someone go about running a report on what users have access to what tags?  From an Audit standpoint we are able to prove access rights through built in reporting in WebAccess.  However we have some docs with security tags and the folder strucutre reports says people have access to things when in reality they do not because of the tags.

Audit shows when and on what a tag is applied but not who has access to what tag.

-Chris