check user role before displaying delete button