Forgive me if this was mentioned before, but how about the whole U_Groups / U_Status thing, where someone can be an Administrator, but not in the Administrator's groups, and therefore don't get access to the admin forum, and things of that nature?

Mike