Pi doesn't even support a permissions model. It's extremely barebones, you're expected to customize basically everything.
So I cut out a lot of functionality in my own fork
https://github.com/Pyrolistical/mi
I took “expected to customize basically everything” to heart