Limiting access to ticket order contributions

I know I can limit which funds appear in the ticket orders module, but are there any ways to control what actions a user can take on an existing contribution in ticket orders?

Specific things I am looking for are preventing alteration to contributions beyond some time in the past, and preventing alterations to contributions at all, based on the logged in user group.

A cursory look over Tessitura Security didn't reveal anything, but maybe I missed something.