make capability in the request validator dynamic
use 'edit_posts' as the default capability