Serendipity's ACL can handle available permissions and map them to groups. Permissions are checked for media items (paths, files) and for categories and entries (Read/Write).