migration user_id to post_attachments and user_id to posts, show posts to user
permission update