So I've gone through and almost got my concrete5 install perfect. I've restricted access to all of the dashboard pages I wanted for a certain group. And their c5 header bar looks great.

There are a few things I'm trying to do, which I think can be done with advanced permissions, but I'd like to avoid it if at all possible.

1. I want them to be able to only add sub-pages to a particular page. They shouldn't be able to add sub-pages to any other page and shouldn't be able to add top level pages at all.

2. I want them to be able to edit the blocks in the page but not be able to add other blocks to an area.

3. I currently don't want them to be able to add/delete users or view the admin account, but want to allow them to change their password/email. I'm not sure if this is possible with either setup.

Any ideas?