There is a very sophisticated user management that allows specifying user rights on a very detailed level.