added role restriction: user has to own the item or be admin  to be able to delete it