adding permissions for updating and removing from posts collection