Have you logged in your application?
If you are not logged in (and using the application with internet browser), you are an anonymous user. Check the user rights of that user in ACL. If it's missing, add "anonymoys" to ACL.
Make sure you want to grant deletion rights to anonymous users.