Current UI is confusing because:
1/ the permission evaluation in 1.9 itself is confusing (see MDL-21710)
2/ the list of permissions is too long

Solution is to use UI based on "sets" of roles.

Spec: http://docs.moodle.org/en/Development:New_permission_overriding_UI