Is it the case that vendors are by definition given full-edit permission on pages? I have other modules on the page, and would prefer that those in the vendor role were not able to affect any changes to those. Also have a bit of fear about vendors inadvertently deleting modules, modifying settings, etc.