What could help are groups in which you could select only certain items, but it would be presented to users as a group. But they would be able to open the group and see each individual item.

And of course, the biggest issue is that users can't manage (restrict) the permissions themselves (without a superuser app at least).