added basic permission to check the posts owner