added permission checking of post owner
allow changes only to certain fields of post