Currently, there is only one permission for ILL on the system. Make these more granular. For example. Allow a staff member to create a request for a patron but don't allow them to manage the request in anyway.
+1