SQLi through hstore is a non-issue, all inputs are sanitized. I'm temporarily restricting admin ability to delete deliverable types, complexities, titles, subtypes and employee titles, subtypes, as associations are linked by ID; and deleting these would have a breaking effect on old reports. That can be restored via db restore, but I'd rather not allow it for now as people learn the system.