hardcoded users with delete permission