added permission to check the posts owner