Any permission that is “add and delete” together should be separated. Everyone should have access to add, but only a select few should have access to delete.