$post_id is existing or not $user can see $post_id or not $user is author or request authenticate $user ($user is logged in or not) authorize $user: $user can do it