added delete button / permissions