CiviCRM Community Forums (archive)

I work for an international NGO with sites in several countries.
Our site is hosted by CSOD and I do not have access to back-end processing.
Our sites would like to use CiviContribute to record and track off-line contributions that come in the mail.
Donations are confidential so I have given CiviContribute access to only our financial officers at each site.

Our Contacts include contributors and experts in the fields in which we work.
A contact may be both a contributor and an expert in one or more areas of interest to one or more of our sites.

We are using CiviCRM solely for internal office use. Our sites like the CiviCRM user interface and all their work is OFF-LINE tracking of contacts, events & participants, memberships & subscriptions and staff activity with contacts. I made CiviCRM Access lists giving edit permission to staff in charge of programs so they can add and change contacts relevant to their programs.
I discovered these program staff can delete Contacts no longer relevant to their programs and the program staff have no knowledge that the Contact may have also been a donor and in so doing, they have accidentally wiped out financial records.

Ideas on how to safeguard contacts who are also donors or who interact with more than 1 of our programs?

Thanks

There's an issue for this in JIRA, but it's only scheduled for version 3.0 at the moment. You may wish to sign in to JIRA and vote for it:

Ability to disable "delete" button

There's also a suggestion at uservoice:

http://civicrm.uservoice.com/ - see "Add Delete permission".