allow deleting records if current user