add basic permisssion to check owner of the post