Restrict destroy action to only people with permission (p 219)