Permissions setup help requested

We find permissions extremely tedious and time consuming to set up. We feel we must be missting something. We find we have to set them without any real clue to what all must be set. Then to find out if we’ve done the job right, we must manually try all the forbidden tasks to see if they are turned off and all the required tasks to see if we’ve left them enabled. Any suggestions as to a rational way to deal with designing, setting and testing permissions? David Studebaker Studebaker Technology, NSC Chicago, IL US