right now a user can create a smart list but once created they have no way to delete it, unless you assign them "settings" permissions (which gives them too much access)