List all ACLs on a group, either direct or inherited

In troubleshooting privilege issues in Grouper, it would be very handy to have the ability to display all direct or inherited ACLs on a group or person. Brown wrote a command line program to identify the direct ACLs, but it does not elucidate the indirect ACLs. Having this ability in the UI would help resolve issues without contacting back office nerds like me.