So the idea is that if I want the agent to add, say, a testimonial, I can write somewhere that "Agents can add testimonials, but not remove them" and I wouldn't need to design the code so that testimonials are a separate file with append only rights given to the Agent User? Allowing me to move forward with a testimonials.html that has all the testimonials hard coded?

Did I get that right?