Publish Projects and Delete Published Data

Hi All,

Hopefully theres a P6 adminstrator out there can spot what I am doing wrong

As part of me rolling P6 out across the business I am creating web access logins for users to simply be able to view data but modify nothing.  I have succesfully acheived this but there are two functions they can still perform which I cant seem to disable in either the global or project security profiles.  These two functions are

1 - Publish Projects

2 - Delete Published Data

To be honest I am not too fussed if they can publish a project as no harm done, what I dont want is for them to be able to delete the published data 

Current software and settings are as below

P6 EPPM R17.2

Global Security Profile - Every Option Unchecked

Project Security Profile - Every Option Unchecked

OBS - I have them assigned to the correct EPS node with the above Project Security Profile