Access restrictions

[thenewguy]

Are there plans (or perhaps I've missed it and this is already available) for hooks to restrict access in a configurable way?

For example, if I wanted to allow the basket user or a staff member to place an order for the basket user based on that basket's items but otherwise restrict someone from viewing the basket if it wasn't created during their session. And similarly for the other components.