Short Term

Get LDAP user authentication working on all configured servers with the possible exception of the LDAP server itself.
Share network user directories between systems.
Define SAC:Security Groups Policy
Come up with a procedure for creating new users, and altering user groups reasonably conveniently.
Setup SVN server(s).
Hook up Apache to do LDAP authentication as well, so things like a subversion repository or just a dumb folder of files can be authenticated in the same way as everything else.
The LDAP needs to be doing SSL, or be firewalled to only talk to internal TelaScience machines
Admit more volunteers to SAC.
Get some appropriate DNS entries under .osgeo.org pointing to the SAC systems. Stuff like svn.mapbender.osgeo.org perhaps.

Longer Term