added update permissions for posts collection