+post delete

models.js

@@ -105,6 +105,21 @@ module.exports = async (dbName='hipstagram') => {
             static get guestRelations(){
                 return ["comments", "directs"]
             }
+
+            static get defaultPermissions(){
+                return {
+                    //savable refs, objectid's, words like 'tags' or 'roles'
+                    read: ['owner', 'user'],
+                    write: ['owner'],
+                    create: ['user'],
+                    delete: ['owner', 'admin'],
+
+                    /*permission
+                     * TODO: permissions for read and write permissions
+                     *
+                     */
+                }
+            }
         }
         SlicedSavable.addClass(Post)