deploy cannot be clicked by anyone that has access to Drone. It can only be clicked by a user that has write or admin access to the repository. If you want to further limit who can promote a pipeline, a third party community extension is available that allows you to do so. See Cannot use CLI without access_token