SharePoint 2007 allows security to be applied at the item level (individual list items) as the lowest granularity. Document libraries and lists can have permissions, but individual items within them can have unique permissions. Site level is higher, not lowest.