I need to put together a new 6.5 security plan.
We have several logins, with various permissions and restrictions. (For example, we have one login/user that has rights only to 2 sp's.) Should I be creating user groups, where probably only one user id will exist?

I want to eliminate us using public group (even though i know it is the DF group and can't be deleted.)
Also, since we continuously create new sp's and tables, I don't want the script to have so many Grant this to that, revoke that from this, etc. But, anyway, if you can give me some tips on the best method, I would appreciate it. What are some of the things I should take into account.
Is there any implementation docs on this out there?

Thank you