Moving recordings to other folders

Hey

I believe that there is a big problem: if the user has the right to edit the entry, then he has the right to move it anywhere.

It moves the secret entry to the public folder and everyone can see it (including the password)

I can prevent the user from editing this entry, and then he will not be able to move it, BUT, he will not even be able to change the description in it. I will have to do it myself every time.

How can a user be allowed to edit a record but not be able to move it?
They are two different things: move and edit. And it hits security

Or I just haven't found how to limit this?

P.S. we are talking about those records that inherit rights from parent folders