Windows Server 2019 OS Security Requests

we need to implement the following two points in Windows Server 2019 OS:
– Prohibit the ability of folders/files deletion, KEEPING the ability of CREATE/RENAME files and folders
– Allow specific websites and block all others for specific group of users.

Note:
The default supported windows server features regarding the deletion files and folders prohibiting the files/folders renaming ability as well, which doesn’t fit us.