[rules-users] Guvnor 6.0 User Security

Maybe it's too early to ask this question, but in reviewing 6.0 beta 2 I didn't see how user security would be managed. In 5.1.1 we have 100+ packages with 100+ users assigned various roles from read only to authoring. Our packages are hierarchical in that we have an overarching and intermediary set that everyone can view, and then individual packages that a user may have authoring privileges. Is there a similar sense in the new framework? Thanks Dean