I could think of taking it one step further than Steve, and have exactly the same permissions in the two environments. The one difference when restoring the database to dev, I would add the developers to SuperDev role, which would be empty in the production database.

A great thing with this is that if the regular user permissions are present in Dev as well, you can easily test permissions in Dev.

If the developers are present in production, adding them to SuperDev is as easy as adding their Dev role to SuperDev. I suspect though that far from all developers have access to the production database, in which case you would need to have a script to add them to the Dev database.