In addition to roles, users can be individually assigned to folders and documents using the User Security tab. This tab allows the administrator to assign either an entire folder or just selected documents within a folder. In the image below, the user has been assigned to all documents within the Setup folder and also to just the "Publish a document with a database connection" document.
With this feature, administrators can fine tune the security for each user.