#848 BlogPosts: when saving content, checking user access rules in the server-side