Cleaned up the permission class correctly. Fixed the tests so that the destroy is an administrative function