allow editing and deleting user s own posts by adding ownsDocument method in permissions file