Check ACL before displaying destroy button

templates/cranefly/profiles/profile.html

@@ -66,6 +66,7 @@
               <a href="{{ url('private_thread_start_with', username=profile.username_slug, user=profile.pk) }}" class="btn btn-icon tooltip-top" title="{% trans user=profile.username %}Start private thread with {{ user }}{% endtrans %}"><i class="icon-envelope"></i></a>
             </li>
             {% endif %}
+            {% if acl.destroy_users.can_destroy_user(profile) %}
             <li class="pull-right">
               <form class="form-inline form-destroy-user" action="{{ url('destroy_user', username=profile.username_slug, user=profile.pk) }}" method="post">
                 <input type="hidden" name="{{ csrf_id }}" value="{{ csrf_token }}">
@@ -75,6 +76,7 @@
               </form>
             </li>
             {% endif %}
+            {% endif %}
           </ul>
         </div>
       </div>