Generally speaking, plugin developers are finding the cancelable xxxxRequestedEvents an extremely useful way to make Stash better suit their workflow and project constraints.

It would be useful to have a set of CancelableEvent subclasses that offer similar hooks into project, repository and global permission granting and revocation so that plugin developers can enforce custom security policies.

e.g. ProjectPermissionGrantRequestedEvent, GlobalPermissionRevocationRequestedEvent, etc.