Corrected permission checking on posting page