Added basic permission to check the posts's owner
Only allow changing certain fields of posts.