only able to destroy publication if a master user, delete sails boiler plate for policies