Advanced Property Restrictions (Specifically Lead Owner)

[Lorenzoenns]

We have a self-assign setup in place. Our salespersons can assign themselves any leads available in the CRM as they come in.

They pay per lead, and basically this gives them lots of flexibility for workload and work hours.

We want to close any potential holes for misuse.

Currently, we have set permissions so that a lead owner can only edit their own leads, or unassigned leads (allowing the self-assign ability).

Once a lead is assigned, they should not have the ability to unassigned it or change the assignment to another owner. We only want Super Admins to have this ability. 

Currently, this doesn't seem possible.

We can lock down a field entirely to Super Admins, but then this doesn't allow for self-assigning.

Is there a work around for this?

Or can this idea be implemented with advanced permissions?

Advanced Permission Request Interface IDEA

Further to this, a cool idea would be for there to be a Permission Requests interface. It would be visible only to Admins.

For example, an Admin could lock a property but then Enable Permission Requests for that property.

Then anytime a salesperson wants to make an edit or change that they don't have required permissions for (such as changing a locked property that is visible to them), they could submit the change as a one time Permission Request, which would pop up in the Admins Permission Request interface (along with any other requests that are listed there.) The Admin could review who it was submitted by, see the existing property and the requested edit, and approve or deny with a single click. Upon clicking approve or deny, the property would be changed immediately and the salesperson would be notified.