Disable purge? Also, hide all docs?

[jumbo jim]

Hi,

I don't want a particular user to be able to delete any documents - only
create/update. I have a design doc to prevent normal deletion -

function(newDoc, oldDoc, userCtx, secObj) {
    if ( (newDoc._deleted === true) && (userCtx.roles.indexOf('_admin') ===
-1) ) {
throw({forbidden: 'no way!'});
    }
    else{
return;
    }
}

However, the user can still purge! Is there a way to stop this?

Also, is there a way to hide all docs? ie, block this -
http://localhost:5984/DB/_all_docs

I know I could put a proxy in between and block/rewrite _purge or
_all_docs, but is there an easier way?

Thanks