allow only changing certain fields of posts