restricted destroy action to only people with permission