* htdocs/document/delete.php: only allow managers to delete documents