Why I can delete a driver in a driver package that I have no "permission" on?

Question

Scenario:
One CAS (CAS), one Primary Site, two users (User1 and User2)
We create a Driver Package with some drivers on Primary Site.
Set Security Scope for the created Driver Package that only could be seen by User1.
Logon with User2, delete a driver under Driver node and that is a member of that Driver Package.
Pop up a window with a button” Show References”, click the button, no reference shows up.
Click OK, then the driver is deleted permanently and not available from User1 too.
Then you may wonder:"Why can I delete the drivers in the driver package?"
Reason:
The Security Scope does not apply to every driver when you set that for a Driver Package. So User2 still has the right to delete a driver in that Driver Package. The pop-up window shows no reference because User2 has no permission to read the Driver Package.
Workaround:
There is no perfect workaround. If needed, you could set the permissions of Device Drivers to uncheck delete permission as shown in the picture below.
However, please be aware of that, this user would be unable to delete ANY drivers under the Drivers Node.
Reference:
Planning for Security in Configuration Manager

Answer 1

If you are using Lion the user Library folder is hidden.
Finder > Hold down the option key and click Go on the menu bar. Then open Libary from the list.
So User Library > Application Support > iWork > Numbers > Templates > My Templates.
Finder in column mode is the easiest..