restrict destroy action to only users with permission