Added basic permission to check the post's owner
Only allow changing certain fields of posts