Suggestion: tell the user what permission is barring him from doing X
I recently tried to enable article subscriptions. I gave the permissions to the Registered group, and thought that would do it. However, clicking on the 'Received Articles' item just tells me I'm not allow to do this. A long seach of the forest of admin options proved fruitless, so I had to resort to reading the source code.
I did also RTFM, but this snipped wasn't mentioned in the manual (which is rather patchy still).
So one suggestion might be that when access is denied, the user is told what permissions he or she lacks which would allow this action. And where to find it in the admin options (which are getting confusing due to the number of features).
Kudos for adding so many features, but be careful of losing usability.
wu-lee