RBAC is one place where SVN is ahead of its DVCS competitors. You have to engage in some gyrations (separate repo, ensuring that the patch-master will make sure that commits don't touch the sacred ...