I have some default records that act as a fallback, I'd like the ability to make
certain records locked where only assigned roles/groups can delete and everyone
else can just modify.