updated onDelete behaviour to restrict; added permissions table