added permissions in the posts collection