A core implemented acp (access control panel)

While it’s not a bad idea, and there’s a lot of sites that would benifit from this, there’s a lot more sites where it would be an administration nightmare. That sort of security should only be available when it’s needed and it’s able to be administered by someone that actually knows what they are doing.

The majority of end-users out there wouldn’t understand how ot set things up corrctly, and that means that any security would be effectly worthless because the wrong settings have been applied. The issue si that if people are given a way to easily change something that they know they shouldn’t be playing with, they’ll still change it anyway. As aprime example of that, look at how many threads on here say “help I changed the URl and broke everything” even though in every one of those threads it always says “don’t do that!”.

Yes I understand your point.

But think about an option, where you have to put a code into the config file (like multisite enabling):
define('WP_ALLOW_ACP', true);

Like the Multisite, this feature can cause many problems, if you handle it wrong. But I dont think, a user can break his wordpress, if he set some capabilities wrong:
Based on the limitation, that the user cannot change the administration capabilities (that would be a very important thing, so the admin cannot devote his power by accident), the only bad thing that could happen is, that the admin gives a usergroup a permission they should not have (like change theme etc).

But this does not brake the page! It does only cause an unwanted permission setting.

So I think, when you make normal end-users as hard as possible, but the advanced user simple to activate that feature and if you put a “Be aware” message at the page, when the users tries to give a permission to a user, which should be permitted, I guess this would work fine.

But what happens when that unwanted permission is “delete whatever you like”? These things do happen, and as much as we always say “take backups, NOW!!!” people don’t.

I do fully understand what you are saying, and I can really see why it would be fantastic, but in reality it is best left to a plugin, and let “standard” website owners deal with permissions in a very known, and very well specified, way. As I said before, too many options makes people make too many stupid choices. This is really plugin territory, not core.