Something very annoying in the setup of permission sets is that you need to add all objects that a specific user needs.

It would be a lot easier to have an options where you could say: this user can do everything except these objects.
This new approach will increase the implementation time for security setup in NAV. Also this is now an never-ending story > when you need to put security on object-id's, you need always to review your setup after new changes are uploaded.