Thanks, I appreciate the insights.
I like the ad_form approach, if only because that appears to be the UI that much of the web is expecting these days.
I am a bit concerned though about complexity and fragility -- yesterday while playing around, I accidentally gave the wrong perm to the public (the perm ui starts off and defaults to admin), and suddenly all of the public could admin this page. That would be a bit less fragile if the admin page itself was in a /admin -- there would be more checks -- is this user a site/subsite/module admin, AND does this user have write/delete/admin perm on this object.
