I'd recommend MoinMoin, off the cuff, especially for the level of ACL control it sounds like you need: We use MoinMoin at work (with groups powered by LDAP) and have found it pretty powerful for that, and I believe it's reasonably configure the styling on.
no subject