authenticated users can create and view posts and create and view comments on those posts