I have removed the member_id constraint because in that case, the admin won't be able to delete comments by users. The checks above are sufficient to make sure a user can't delete other comments if he is not the admin.