Partial auth filtering for PostsController