We have people that need access to constituent contact information in NXT, but we want to limit their access to any gift information.  Some gift information (asking amount, etc.) are entered as constituents attributes.  In RE we can restrict their access to the constituent attributes, but these people use NXT instead of RE.  In NXT we can restrict their access to the constituent attributes tile.  But also in NXT they have full access to the constituent attributes via lists.  That is a gapping security hole in NXT LISTS.  The only option to prevent access is to disable their access constituent lists.  But lists are essential to view groupings of constituents.