adding DELETE_RECORD to the default permission set