What would you think about some default user groups with default-set permissions? These could be:
- Admin -- automatically all permissions
- Editor -- permission to add, modify and possibly remove pages, as well as html blobs & news, and possibly stylesheet associations
- Designer -- permission to add, modify and remove stylesheets, stylesheet associations & templates
The Admin group would automatically have permissions for all extensions that are installed. For other groups this would be set manually, like now.
The next step could be to automatically give permission to the Editor Group when content-type extensions are installed (like guestbook, glossary, FAQ etc.).
This would go along with the three user roles defined in the documentation at http://www.cmsmadesimple.org/getting_started.shtml