The ability for users to only have access to certain resources, this would be good for delegating access around.
This should use the user_timetables link thats been established but should be used to further lock things down and simplify (remove the user from even seeing things they dont have access to)