It's been 10 years Sharepoint is around, but this feature is still missing OOB. It would help immensely in governing a Sharepoint farm, IMHO. Administrators should only setup the rules as staten by the business, then nothing is to be done later.
We are doing in a limited way by using custom workflows with custom lists which maps the relation between security groups and managed metadata.
I am wondering, anyone has implemented this with some custom code ? I know there is a product called Titus, anyone has used it successfully in real world ?. Not sure how it would impact the Sharepoint installation, I am always skeptical of installing third party solutions.