A user can only see his/her own posts and his/her friends' posts