I'm a new SharePoint SCA/developer in a large organization with very locked-down access to a SharePoint Server 2016 site collection. In general, from an admin point of view, we aim to keep permissions as out-of-the-box as possible for ease of support later.
I have a site administrator who is requesting custom permission levels for their site in order to create a "comment box" style feature that will allow users to add items to a list, but not modify or delete the items they have added. The users should otherwise only have Read access to the rest of the site.
Is there a way to do this using the Default Permission Levels Microsoft lays out?
If no, my thinking is to create a new permission level with a descriptive name like "One-Way Contribute" to act as a red flag for future support needs, and then just duplicate the default Contribute permission level while removing "Edit Items" and "Delete Items" from it. I would love to avoid this and stick with the defaults if possible.