Chef has ACLs for each object it manages. These aren't configurable through knife built-ins.

This package adds the "knife acl" series of commands for managing them.