only allow changing certain fields of posts