It would need authentication and authorization for this. At least for the delete operation