I already started writing a patch to enable Node grants in addition to Node access. This is super important as queries and Views do not consider Node access rules.
More about entity grants:
https://www.drupal.org/node/777578
Any comments before I dig deep?
Comments
Comment #2
iztok commented