Hi,
It depends on what you want to do.
For example we uses 2 pathcodes DV7333 and PY7333 (but more environments, using thoses pathcodes : DV, PY, IN,..).
OMW status are 21 for DV7333, and 28 for PY7333.
Default status for new project is 21, and default role is '02' developer.
I defined that the developer role could do everything with 21 projects, except release token (because i want to know if several developments impact the same object, to avoid problem while deploying to prodution).
But someone can change his role on a project, but it's really easy to protect this using Application security in P00950. You just need to block OK button of W98220D form.
Is that those kind of things you want to do ?