Lock timesheets after payroll has been run & block managers from being able to delete past employee holidays

We have instances where employees are amending their timesheets after the payroll cut off dates and this is causing huge issues, as we are unable to lock the timesheets after certain times. These feels like it should be standard functionality. We also need to be able to stop managers from deleting or amending holidays which occurred in the past.