Users can view and update posts

- Enable all users to view all posts
- Enable current_user to view their own posts
- Enable current_user to edit their own posts
Maybe make this a number instead? Say `-1`, which you know won't be a real ID.