user can only delete own products + location