A user created a timesheet. It was approved. They then deleted it and resubmitted a new one. Is there a way through access control in roles to restrict users from deleting their own timesheet?