Granular control for user permissions

I would be nice to be able to created user roles, and then assign very specific permissions to those roles.

i.e. I might want a couple different levels of guest roles. Some would be read only, other would be able to create task, assign tasks and complete tasks that are assigned to them.