Restricting Roles to be stricter

I want to setup an Author role that can only create/edit documents in their respective folder. This is not a problem.

What I see is that all roles are given default permissions as evidenced by the greyed out checkboxes even if these were set to ’0’ in the roles table in mySQL.

Further, when editing a document, this "limited" role can change document attributes such as...

Alias
Link Attributes
Users Templates (bad!!!)
Menu Index
Cacheable
Clear Cache
etc.


Is it possible to further restrict both the role permissions and document settings on what a user is allowed to use? There are certain fields that a very basic content authoring user should have no business messing with - especially the template!

You may be able to hide certain feature by using the ManagerManager plug-in.
http://modxcms.com/ManagerManager-1565.html