Currently security permissions for build promotion are only applied at the global level.
It would be useful to be to restrict when users/groups can and cannot promote on a per promotion basis.

This would be used when having staged promotions so that, for example: only users in group 'dev' can trigger the 'promote to dev' promotion process.