Currently there is no access restrictions to case file data not comments. That makes it hard to cover usual case management cases where users can add private comments (visible to given role in the case instance) or restrict access to some data in case file (sensitive information/documents).