Currently even draft writers are able to change the access to specific categories and articles. This is a security issue. Maybe a user group admin panel would be a good idea? To steer the rights which user group can do what.