Authorization spec tests on bulk_delete