Restrict post updating to only those who have permission