add access control for admin and creator only for edit post