Current ACL options for bfstop only include bare minimum (ACL management + general access options).
There should be a more fine-grained control; at least an additional differentiation between being able to just view and to edit (add, change, delete) entries.