Currently there is a list of commands and login levels needed to execute those commands. Cvar_set is one of the highest level commands, usually, as it is the most powerful. However, that command was broken down into settings that could be changed by different login levels, it could be a lot more useful. Then people with low-level logins (such as those using the server for matches) could change some of the basic settings, but not be able to change other settings.