1. A verification method, comprising: configuring a reference system, running on a computer, to have a same set of executables and customizations as an e-business system to be verified; mapping one or more business processes that are implemented in the e-business system and are in the scope of the planned verification; executing the one or more business processes, using the reference system, and saving in a repository logs of permission checks conducted in executing the business processes; creating a merged permission log by merging records from the saved logs of the permission checks with respect to at least one role; comparing permission settings for the at least one role in the e-business system with corresponding permission values in the merged permission log for the at least one role, to identify discrepancies between the permission settings and the corresponding permission values in the merged permission log; and modifying permission settings of the e-business system responsively to the identified discrepancies.