added basic permission to check posts owner