Thread:Project:Support desk/Restricting view/edit privledges on a custom namepsace to Administrators && LDAP help/reply

All of this should be supported by the LDAP extension.