Restrict destroy action to those who have permission