Ok. I got your point. The first point is implemented. The status is checked once and the permissions are set accordingly. The second - reporting status changes back to oacs and altering permissions - is work in progress.
Would you rather pull or push this info? I could either provide a scheduled proc that asks for changes or provide an interface in oacs that is called when changes take place?