To exapnd on what Scott said, I believe one approach to user permissions is to create a user group on all publish instances and apply the desired ACLs to the user group.Users who are members of the group inherit the permissions. Thus, when syncing users between publish instances, no ACLs need to be...