added basic permission to check the post's owner