Users can move read-only files

Hi, 

We are using windows server 2008, and I was wondering why users (windows 7) are able to move read-only files, I would prefer them not to be able to but it seems to be linked with the read attributes.