Glad you like it! Yes we actually plan to introduce general access-control features, but probably won't be a separate module but will either be included as part of the authentication module or the database module. We want to provide flexibility on that functionality as we do with all of the components.
Currently in projects that have used conduit, this is done using "authenticate" routes ex. custom operations in the database/cms module, where you can check a user's id or you can do it by adding your own custom modules for the logic that you want to protect. Moving forward (when the authorization feature is added) you'll be able to do stuff like that even more easily through the admin panel.