Prevevent users from changing the invoice status

We have users who don't edit or delete on invoice. However, the system allows them to change the status of an invoice(Issued, Paid, Partially paid and Sent) from the invoice list. This needs needs to be prevented. Note that this has a big implication due to that someone can mark the invoice as paid while it was not paid. Thank you