delete/edit func in backend controller done but not legit