namespace security

Assuming an existing mature user model (perhaps with group memberships), roles (e.g. create, edit, manage, comment) could be assigned based on namespace match strings. Regular expressions might be more complex than needed, but wildcard rights allocation to /users/*, /snipsnap/*, */comment/*, etc. could be useful.

This could be a slippery slope, though, towards magic snip names.