I am building an intranet site for my organization with Wagtail and we are in the process of adding a knowledge base. The entire site needs to be restricted to logged-in users, but certain pages need to only be accessible to users in certain groups. For instance, only members of the IT group should be able to access the pages underneath the IT Knowledge Base page.

Currently if I set the top-level page to be accessible only by logged-in users, that permission is applied to every page on the site, and I am barred from setting more specific permissions on any child page. It is imperative that I be able to set more specific permissions on child pages.

I was able to find

You can build this out to a more complex authorisation model, matching user groups with models and permissions if need be, rather than the hard coded example above.

This doesn't affect CRUD permissions for programmatic operations, but if your concern is just the editor interface then this works.