yup... Dunny perty much sums it up...

use mass permission copy, instead of sql queries

2c