What a great idea !

No, seriously, from a business point of view this has to be great.

Sell a product that allows the management, who has no technical know-how whatsoever, to define their own security rules and object definitions.

And who, in management, is going to actually, you know, READ THE MANUAL ? Who is going to take the time needed to implement a test environment ? How many suits are going to worry about side effects before going in and implementing their latest brainstorm in production ?

The management is going to love it, fiddle around with it, and - most importantly - continually break everything. And when something is broken, what will management do ? Ring IT, of course, and issue a terse "fix it !" command because, you know, this thing has to work RIGHT THIS INSTANT.

And IT will slave away at the trash that the managers put in until it's fixed, get no thanks at all for their efforts and just pray that those suits won't break the thing again in the next five minutes.

I think we've got a winner here !