Added allow() permissions for updating and removing posts