Incase you hadn’t seen it yet @Al_James, the team is working on CMS collection permissions. We held a Studio Hours a few weeks back where we showcased the upcoming ability.
You’ll have the option to choose the roles and permissions that can access the collection. More info here