We've released an update to our custom roles enabling administrators to restrict permissions on specific content entries.

This feature is available on all Performance spaces.