Projects - View only permission for agents but can update own tasks

There needs to be a permission where agents can view all tasks for a project, but only update (and NOT delete) tasks that have been assigned to them. Currently there is no restriction meaning agents can delete all tasks within the project. There are also no workflows for projects so I can even get notified if someone deleted a task.