We think everything should go through a role, and ideally the roles can have functions assigned granularly.

But at a minimum, unlocking a document could probably be reserved for an admin to ensure data integrity and correct processes are followed if a locked document needs to be re-issued

Since we really only have two user classes. Full and admin. I don't know what happened to the old staff role. We could at least limit the number of bookings someone had access to with that role where they could only see what was assigned to them.