If a user doesn't have the correct privilege they should be able to perform certain action - [X] User should not be able to view the collection when read privilege is unavailable - [X] User should not be able to add a post to that collection when `update` privilege is unavailable
If a user doesn't have the correct privilege they should be able to perform certain action
updateprivilege is unavailable