added basic permission to check the post owner