rest: add policy for delete entity

By default, user can only delete resources they created.

Change-Id: I80009c9cab7f7f6b5fe09503c91eb0da07eddea0
Merge "rest: add policy for delete entity"