Restrict destroy action to those with permission