Users can view and update posts

- Enable all users to view all posts
- Enable current_user to view their own posts
- Enable current_user to edit their own posts
I dont think you will need this, since you are finding the post through the user. If the user doesn't own the post, it will just rails a 404.