This is so critical. The security settings in webview alone are not good enough, nor are they clear. Some users may need rights to delete very specific types of data, but that is not allowed. What does it mean to "manage unassigned prospects?" Does that mean you can edit or delete any data if they are unassigned, or does it just mean you can assign them to a fundraiser? This is the thing that makes me the most anxious about webview.

I'm having a difficult time discerning what Roles to assign. For instance, in database view, I have users who can modify an Appeal description, but were not able to in NXT. It took me over an hour to figure it out (that was yesterday, and I couldn't figure out how I came up with the answer that it's in Fundraising Role). The Roles are confusing and vague.

If someone has "view" only rights should be just that "view only" and not have other rights. Also, if someone has rights to view lists, they should be able to view the list regardless of how it was created.
There a lot of rights that are connected to each other when they really shouldn't be (same is true in database view).