hcm_blog post actions and permissions