The permission structure is basic at the moment - the admin can decide who can join. Devs have final approval rights for any edits that make it into the apps. In the future we are planning to build out more permission functionality that supports more complex workflows.