mod/data:writeentries capability

It seems that this permission controls only creation (writing new records), although the name could imply also editing (writing to existing records).

mod/data:manageentries capability

It is not clear what actual capabilites are included here. I am guessing Edit and Delete. Manage is vague as a word, and the docs say nothing more concrete. There is a whole range of "manage" permissions.

For example, with those capabilities, it is not possible to produce a database where records may be added and deleted only by teachers or administrators but can be edited by all students since manageentries is a combination of permissions.

It be useful to rename the ambigous permissions and have more atomic capabilities. For example, instead of writeentries and manageentries:

mod/data:createentries
mod/data:editownentries
mod/data:editanyentry
mod/data:deleteownentries
mod/data:deleteanyentry