fix: permission for whitelist functions

erpnext/setup/doctype/transaction_deletion_record/transaction_deletion_record.py

@@ -642,6 +642,8 @@ class TransactionDeletionRecord(Document):
 
 	@frappe.whitelist()
 	def start_deletion_tasks(self):
+		self.check_permission("write")
+
 		# This method is the entry point for the chain of events that follow
 		self.db_set("status", "Running")
 		self._set_deletion_cache()