I have been looking for a concise description of the relationship between permissions in MOSS. Thanks to David Marsh, he provided me with this link which nicely articulates this;
http://office.microsoft.com/en-us/sharepointserver/HA101001491033.aspx?mode=print#3
