Restrict destroy action to only people with permission