Use `Post.find_with_permissions(id, env.current_auth)` instead.