Restrict destroy action to only people who have permission