tweak the view_post authorization for user