Check if user has permissions to update / delete