The coherent access module might do just what you are looking for: http://drupal.org/project/coherent_accessWe have used it to accomplish what you describe on several sites.