More granular permissions for SDT actions

Please implement more granular permissions for SDT function.  We would like to be able to grant permission to apply SDT to data sources elements, but NOT on the resource itself.  We often encounter situations where by accident or carelessness our staff apply SDT to a resource instead of the data source element.