[This may duplicate or subsume other requests.] All configuration files should be editable through the GUI. Implement security so content editors cannot ruin the site structure, but add the ability to edit CSS, XSLTs, and maybe even XMAPs. Try to remove reasons anyone would need access to the file system.