The architecture of CalDAV (partially inherited from the underlying specifications) organizes the data (events, tasks, free-busy info, notes) in directories (collections), where multiple items (resources) reside.
For access control the concept of ACLs are used, so each operation (view, edit, delete etc.) can be denied or granted per user.