doc update
fix delete missing permission check