only allow admin user to see reported post