Currently the advanced capacity planning enhanced security option provides 2 choices.
1) Allow all users to view/edit detailed estimates
2) Allow only users with a custom role to view/edit detailed estimates
With option 2 enabled, if you wish to have certain users have edit access and other users have view access, you have to create two completely separate roles and then assign those roles to everyone in the account according to their access requirements.
There is a use case where an account universally wants everyone to have view access, but only a subset of the overall users to have edit access.
To simplify this configuration, it would be helpful to have a third option where anyone with the default "Viewer" role or higher has view access to the field. But only users with a custom role can edit the field.