Server Configuration > Access Control List Permissions > Setting Your Permission Strategy > Assessing Your Needs
  
Assessing Your Needs
ACL entries determine who may or may not perform specific operations. Your choices of principals and permissions should reflect the way that development is currently managed at your site. Consider the following:
Is a formal or informal development process currently in place?
What are the tasks and abilities assigned to each group?
What should individuals or groups be able to do, and what should they be restricted from doing?
To a certain extent, you can mirror the roles of your development personnel in the groups defined through the ACL.