add hook_node_access_explain() which helps admins and developers understand the grants on each node. all developers of node access modules are encouraged to implement this hook. see devel_node_accesss.module in devel package.