lukaszr for me a very good option would be to add in the roles permissions a Read, Edit without Archive