limiting post permissions. currently only string owner. extending permissions later