Jim,
Why don't you use a dedicated user profile for the web connection
(called WebUser perhaps) and simply deny WebUser delete rights to the
underlying physical.
-Walden
------------
Walden H Leverich III
President & CEO
Tech Software
(516) 627-3800 x11
WaldenL@xxxxxxxxxxxxxxx
http://www.TechSoftInc.com
Quiquid latine dictum sit altum viditur.
(Whatever is said in Latin seems profound.)