Preventing document deletion for regulatory compliance

[gtb]

What is the concept Alfresco had in mind for tracking documents for regulatory compliance?  I have set up a basic installation and I find that collaborators can delete not only their own version of documents but also the original version put in the depository by an admin.  If they hadn't touched the file then it seems they cannot delete it.  In any case this behavior will not be acceptable for document control purposes.  I imagined that documents in the repository could only be deleted at the admin level and that all versions would be saved and tracked.  How do people use it for this purpose?

[zladuric]

From what I know, only site contributors and site managers can delete documents on a site. Collaborators can only delete the files THEY uploaded.

On the other hand, there is the Deleted Items Store. Go to the "User profile and settings" as admin (second admin from the left in the web client) and see Manage deleted items.
You can also define that content is autoversionable so that even the changes are tracked.

[gtb]

Our requirement and I think this is typical is that even the person uploading the file cannot delete it.  Is there some way to configure this?

[zladuric]

Well you need to change the roles of users in their sites.
See this to get a better picture:
http://wiki.alfresco.com/wiki/Target_User_Roles