Btw, Permission Sets are Insanely Great. Product Manager Adam Torman is "Mister Permission Sets", and he's written some useful blog posts on implementing them:
Dictating Tab access (!) with Permission SetsMigrating your organization toward Permission Sets