Restrict destroy action to people with permission