Index: src/main/java/com/db/finki/www/build_board/controller/channel/ChannelController.java
===================================================================
--- src/main/java/com/db/finki/www/build_board/controller/channel/ChannelController.java	(revision 4cfb3a5f62751cfe9f031a04e43ed8e3fe095843)
+++ src/main/java/com/db/finki/www/build_board/controller/channel/ChannelController.java	(revision 29a7c0a1bbc694587ffaf85a326065e661b7b7d9)
@@ -84,5 +84,17 @@
     @PostMapping("/{channelName}/delete")
     public String deleteChannel(@PathVariable @P("channelName") String channelName, @PathVariable("title") @P("project") Project project,
-                                @SessionAttribute @P("user") BBUser user, RedirectAttributes redirectAttributes) {
+                                @SessionAttribute @P("user") BBUser user,
+            RedirectAttributes redirectAttributes, Model model) {
+        Channel c = channelService.getByNameAndProject(channelName, project);
+
+        if (!projectAccessManagementService.hasPermissionToAccessResource(user.getId(),
+                Permission.DELETE,
+                c.getProjectResource().getId(),
+                project.getId()
+                                                                         )){
+            model.addAttribute("error","You dont have permission to access this channel");
+            return "redirect:/projects/" + project.getId();
+        }
+
         channelService.deleteChannel(channelName, project);
         return "redirect:/projects/" + project.getTitle();
Index: src/main/resources/templates/project_pages/edit-role.html
===================================================================
--- src/main/resources/templates/project_pages/edit-role.html	(revision 4cfb3a5f62751cfe9f031a04e43ed8e3fe095843)
+++ src/main/resources/templates/project_pages/edit-role.html	(revision 29a7c0a1bbc694587ffaf85a326065e661b7b7d9)
@@ -149,4 +149,15 @@
     }
 
+    /*
+    * if (!projectAccessManagementService.hasPermissionToAccessResource(user.getId(),
+                Permission.READ,
+                c.getProjectResource().getId(),
+                project.getId()
+        )){
+            System.out.println("vleze deny access");
+            model.addAttribute("error","You dont have permission to access this channel");
+            return "redirect:/projects/" + project.getId();
+        }
+    * */
     document.querySelector("#btn-cancel").addEventListener("click", ev => {
         ev.preventDefault()
