Seems like I'm missing something somewhere. I want to keep users in a role from Destroying documents.
Most users are assigned the Everyone, CMS Editors and Authenticated Users role. The CMS Editors role has the following checked: Read, Modify, Create, Delete, Browse tree.

However, I can log in as a CMS Editor, create a document and then Destory it, even though destroy is not checked.
What am I missing?