> Now, the one thing you give up is the per-field permission settings (which were a little crufty
> anyway IMO).  I'd be an advocate of trying to re-introduce this type of access on a node level
> instead. 

There is a cck field permission module, but I have not tried it.
Wouldn't that be the right direction for this?