Reactivate Lead & Close as WON permissions

Dear Team,

I am trying to restrict who can 'Reactivate' Leads and who can 'Close as Won' Opps - I only want management to be able to do this outside of the business process flow.

Is there anyway to do this using out of the box functionality?

I believe we could use Ribbon Workbench but wanted to know of any alternatives using processes or security roles.

Thanks,