I had a very similar experience regarding Jifty's user permission built-ins (and the docs which ostensibly describe them). Really, the whole project was a sequence of:
I can easily imagine how keeping Mason and throwing the rest out could make your life a lot more pleasant, especially if you don't need AJAX/continuations/insulation from SQL/a pony/other features that Jifty provides out of the box.