restrict destroy action to only people with permission