patched small bug in the server delete code -- changed acl required to delete from box to write not owner