Hopefully some members of the DNN core team, project teams, and experienced DNN developers will be able to aid me with this question...

Our organization plans on using DotNetNuke to create an intranet/extranet company portal where authorized users can upload/download digital assets, view media content, colloborate through forum discussions, etc.  We are currently at the most preliminary of stages with regard to this project and need to figure out the architecture for our site before moving onto any actual design and development.  This is where I hope to utilize some of your expertise and would appreciate your input...

We will have at least two core user groups accessing the portal (aside from Host/Administrators) - Corporate Users and Vendor Users.  Upon sign-in, we would like each of the two user groups to have access to unique content.  How can we best achieve this?  Should this be done by creating two separate mirrors of the portal, one for Corporate and one for Vendors?  Or would it be more economical and efficient to just limit what can/cannot be seen by setting up "View" permission rights for individual pages and modules?

If any of you have any experience with a similar situation, how did you do things?  Any examples you can provide would be great.

Thanks! 

--Daniel