Callback to authorize. Prevented only admin from deleting self