I have been playing with the CLI tools to manage access control to distribution lists. Hopefully this thread will help others and maybe get a list of all the commands to view and grant rights. So far I have been able to disable expansion/viewing and sending to distribution lists per individual email addresses. However, changes to deny sending do not take affect right away. So my questions are..

Is there a way to make the ACL changes take affect right away?

Is there a command to view all ACL's associated with a list? Not just individual email address rights?

Just for reference here are the commands I have used to grant and check rights.

Disable an address from sending to a list.

zmprov grr dl listname@domain usr user@domain -sendToDistList

Disable expansion/viewing an address to a list.

zmprov grr dl listname@domain usr user@domain -viewDistList

To check send access to a list for an address

zmprov ckr dl listname@domain user@domain sendToDistList

To check expand/view access to a list for an address

zmprov ckr dl listname@domain user@domain viewDistList

To grant send rights to only allow addresses in the list.

zmprov grr dl listname@domain grp listname@domain sendToDistList

To grant expansion/view rights to only allow addresses in the list.

zmprov grr dl listname@domain grp listname@domain viewDistList