add access check for post previews