I can feel your frustration because I have the same problem - and I don't think that the responders here are actually understanding the problem because they are not answering it correctly. 

It would be EXTREMELY helpful to know what each permission actually affects.  I had the same issue with giving my user full access to the inventory area, but then he couldn't view inventory reports.  It doesn't tell you what "general ledger" permission actually lets them do.  The permissions list is very confusing.  Is there a list somewhere that shows exactly what each permission allows a role/ user to do?