I'd like to see all admin privs exposed to checkboxes, and be assignable to security roles that we create.
[ ] Pages: Create, Delete, Manage (get into Settings)
[ ] Add modules to pages (and a list of available modules and check the ones they can use!)
[ ] Users: View Users, Manage Users, None
[ ] Edit any / all portal content
[ ] Event Log: View, Manage, None
[ ] FileManager: View, Edit, None
If FileManager Edit, then
[ ] Create Folders
[ ] Delete Folders
[ ] Upload files
[ ] Delete Files
[ ] Rename Files
[ ] Edit Files
Et cetera
Not sure if these things are broken down in this way in core, but it would be great to be able to create roles with selected privileges like this. Admin is required but too powerful for many of our client/users.
Maybe my examples are a bit too granular, but take it as suggestive ...