added basic permissions to verify posts's owner