spree/spree_wishlist — pull request #12 by danmorin (2012-03-10 01:44:41+00:00)
Title: The correct check is for destroy not delete

Note that without actually performing the authorization checks in the controllers, this doesn't really even matter.