added basic permissions to check the post’s owner