Features app developers really really need

how would you want the access control lists to be implemented?