Users can view and update posts

- Enable all users to view all posts
- Enable current_user to view their own posts
- Enable current_user to edit their own posts
Is this actually working correctly?