Check for overall asset delete permissions before checking to see if the user can delete that specific asset

app/Http/Controllers/Api/AssetsController.php

@@ -373,7 +373,10 @@ class AssetsController extends Controller
      */
     public function destroy($id)
     {
+        $this->authorize('delete', Asset::class);
+
         if ($asset = Asset::find($id)) {
+
             $this->authorize('delete', $asset);
 
             DB::table('assets')