It would be great to be able to set push permissions on a branch-by-branch basis in Diffusion.
Use case: An organization practices continuous deployment off of the 'production' branch. Only the release leads are allowed to push to that branch (and they usually do so after merging in commits from another branch) but all of the developers are allowed to push to the 'master' development branch.
I believe this has come up as a question before, but it was asked on Ponder (which is now not visible).