disable posting if not authorized