Per-type access control

Currently the following permissions are available from the Log module:

• Administer log module
• Administer log types
• Create log entities
• View own log entities
• Edit own log entities
• Delete own log entities
• View any log entities
• Edit any log entities
• Delete any log entities

This works well, but it does not allow for fine-grained access control on a per-log-type basis.

For example, perhaps you want to allow anonymous users to create one log type, but another log type should only be created by admins.