Is there a module for user level permissions?
Yes! Check out the Role Delegation module. Here is a quote from its project page:


  ... allows site administrators to grant some roles the authority to assign selected roles to users, without them needing the administer permissions permission.