[WIP] Post list: authors see their own posts

issue #3446

This is going to need us to add ?author= to posts.read and ?role= to users.read... will get this done in a bit