Which objects can I secure using access control lists?

You can secure catalogs and categories, items, manufacturers, and workflows using access control lists.