I would also like to cite the need for more granular control of permissions for individual properties.
For instance, I would like to allow users to assign unassigned contacts/companies to themselves, but not to other people. Inadvertently doing so can screw up multiple people as now some users end up with contacts they don’t know what they were supposed to be doing with, and the original owner/claimmant cannot access the account since we don’t want them to be able to edit each others’ accounts.
Also, making certain properties view-only, rather than just broad categories, would be helpful, as I currently need to allow editing to the whole module to permit any editing at all, while there are several fields that should not be edited.
Allowing field-specific permissions would be very helpful so as to not be forced to give users enough rope to hang themselves with.