Tom, grouping rights can be done by granting the permissions
to a group and then adding a user to that group to grant the
set of permissions (I think its equivalent to the way roles work on oracle for example). Of course as far as I am aware
nothing exploints this (well dotlrn sort of does I guess).
