move the current_user_can and do a proper check against the post type