Having the ability to change prices and shipping in the basket is a good for head office but sales reps in the field who don't have access to database information shouldn't. The ability to allow or deny individuals would be good. Alternatively, accountability for changes to the basket with ID markers would be welcome.
We are working on a new security model that will allow us/you to create 'roles' with granular permissions for wach role. Once this is rolled out in the autumn you will be able to do this.