So I've noticed that I can add a

writeConstraint

to a resource but that actually still allows the user to delete it. Is there any way to prevent deletions? I understand how to restrict to updates/creation only. Here's a sample access policy. I want to not allow users to DELETE Appointments as well

{
      "resourceType": "Appointment",
      "writeConstraint": [
        {
          "language": "text/fhirpath",
          "expression": "%before.exists().not()"
        }
      ]
    },

Hi @noclip - unfortunately, at this time this particular pattern is not supported.