just don't give them permission to delete