Crabgrass_acts_as_permissive is a project mainly written in Ruby, it's free.

Very flexible and powerful way to resolve permissions that are granted to groups