Thanks Ben - That all seems to be pretty much as I expected.
Would I be correct in saying that the OpenACS UI does not support setting up the equivalent of a dotLRN 'Community', i.e. a number of packages linked to a group/party via membership relationships and overlaid with permissions (excuse my v. simplistic description)?