added basic permissions for editing/creating posts