That issue # to me is more addressing that things should be protected as intended, but it doesn't sound like we're sure what the intent is.  In an ideal world we would be able to control on a combination of content view, repository, & Environment, but as the century old adage goes 'you work with the permission system you're given, not the one you want'.  

So I say we either go with:

a)  Read Content in Environment X (Across all repos or CVs)
b) Read Content in Content View Y (Across all repos and Environments)
c) Read content in Repository Z (Across all Environments and CVs)

to me b) makes the most sense, as its the 'unit' that the user is constructing.   Thoughts?