Check that the user is admin before showing a non-published post accessed by ID