Any user being able to alter the data model is just a fundamental design flaw.

Other than that, I'd expect segment-based permissions (sales team/territory etc) as a minimum.