make sure post can only be seen if published or user has reviewer permission