Restricts the destroy action to only users with permission