Description of problem: We have added a new feature to Pacemaker 2.1, and we would like it to be supported by pcs. The feature is a new cibadmin command-line flag, the show-access flag, which displays an annotated version of the CIB with permissions information with respect to a command-line-provided user. The information can be displayed in the form of colors, text, or namespaces. In the case of colors, the parts of the CIB that the user has access to are colored as follows: green for writable, blue for readable, red for denied. In Pacemaker, an example usage is `cibadmin --show-access=color --query --user tony`. A possible equivalent syntax in pcs might `pcs cluster cib --show-access=color --user tony`.
This may be available as a subcommand of 'pcs acl', or an option of 'pcs cluster cib', or both.