Scrott implements a very flexible permissions and access-control system. It all starts with users' accounts. Users can create and maintain objects and share them with other users if they choose. This is done with a mechanism similar to unix file permission modes. Scrott objects form a hierarchy, so permissions from 'higher' objects will cascade down. This means that a non-trusted user may control an issue in your pad, but have no access to the pad itself.