This may be addressed in future releases, but...
It would be nice to be able to specify read/write permission levels within document groups and/or user groups. For example, Some people need to read and write everything within a certain context. Others need to read+write within one context but only read access within another context. This is especially true when you want to have users edit certain sections of a web site, but you also want them to be able to see other sections of the web site so they can make links using the MODx [~123~] system. Otherwise they have to hard code the URL based on the path seen in the browser.