Authorisation

Authorisation is the question after who are you: what are you allowed to do?

Where people go wrong is how that gets enforced. Hiding a button is not a lock. If the only thing stopping somebody deleting every record is that the delete button is not on their screen, then anybody who knows how to ask for it directly can still delete every record. The system has to check properly, every single time, not just decide what to show on screen.