Tested, delete should work only if the user is the same, #360 still not merged in master or/and production