I found this very cool extension for stsadm.
It enumerates the effective permission for a given user and is also able to tell you what rights a user is MISSING.
Get it here
Great work, Gary!