Roles and permissions

For EditingTeacher role, you have both a:
Anyone have a patch that will define more of those granular capabilities? Specifically, because enrollment is managed via external database only, I want to lock down the ability for Teacher to be able to change any of the Enrollments and Availability options.