Andreas,
Q Software is very cool. I have seen the demo myself and have had conversations with them. It didn't make sense for our company because we already had a pretty mature security environment. As a CNC who has done security for a number of year now, I could definately see the value in that solution if I had to start from scratch. That said, the alternative to Q Software is to do security within the application "Old School" style. That means having an expert log in as an application lead, and then identify all of the applications, visual assists, reports etc. that a group needs and then have a security admin like myself add those applications into the security records for the group. Then someone else has to go in and test to see what applications we missed, and then add those in and so on.......
All doors closed security is difficult to impliment, but then again, we are talking about an Enterprise Resource Planning application here. If it was easy, everyone would be doing it.......
Good Luck and keep up posted on your progress.
Gregg Larkin
JDE System Administrator (CNC) / North America
Praxair, Inc.