Currently you can only assign permission users, but you cannot take them away. I would like to have an user which can create any collection, do anything with them, but for one particular collection they should be able only to insert new documents into it, not update or delete them. Currently it seems this is not possible.