I would like to chime in here and note that the request to be able to assign permissions based on user, not just role, has come up time and time again from various different customers (as well as myself), accross all modules.  It seems to me to be a fundamental topic for discussion regarding how the core handles users and roles.  In the ideal world, I would think that permissions are abstract from roles and users, unlike the way they are now which are specifically tied to roles.  Each 'permission' should allow access to a particular peice of functionality, and both users and roles should be able to be assigned to that.  Not sure how much being tied to the Microsoft membership model limits us in doing that, but this complaint is one I have heard many times.

---

Josh McWilliam
Flatburger
Bright Hub
Jamnaytac Technologies