I recently had to implement security where users couldn’t delete items, except an item of a certain type. I never had to implement anything like that before, and I was trying all sorts of ways to do this, but the answer is very simple. I’m sure seasoned Sitecore developers know this already, but if you didn’t – configure the permissions in the Security section of the Standard Values of the template. Done.