user can't delete products