I've used sp_help_revlogin forever, whenever I need to move logins from one machine to the next.  I am trying to strengthen/refine/improve my security management, and I am wondering if somebody can help me take this a step further.

it's not just a matter of creating the logins.  it's also creating the associated database users and roles, AND the object permissions.

I have a lot of individual scripts that allow me to script out permissions based on user or roles.  But, i'm looking for something that may help me approach this a little more broadly, at the database layer.

Again, i am just in the process of cleaning up all my admin scripts -- right now i'm looking at the security model specific to each database.  That is the logins, the users and roles, and the related permissions.

Does anybody have a means of mass-scripting this sort of thing, maybe by database?  And if not 'mass-scripting', surely there is a cleaner means of doing this than what I've got.  (right click object, generate script w/permissions, then re-use, as needed... yuck)