permissions check post