Please add the ability to assign read-only or write-only permissions for specific asset categories(inside a specific company ~ not for all companies), KB sections in a company, or password folders. This provides more granular and safer permission control.