use new, simplified permissions (destroy is outside permissions, checks for superuser)