Cross-author post access via admin_id override

Authorization bypass in givanz Vvveb before 1.0.8.4 allows remote authenticated users to read or modify other Authors' posts via backend post requests. In admin/controller/content/posts.php, the post list handler lets filter[admin_id] replace the server-selected ownership filter, and duplicate and delete actions trust caller-supplied post_id values; the related post SQL did not consistently constrain post.admin_id. Author-level access is required, and successful use can expose private draft metadata or permit unauthorized duplication and deletion of another author's content and related rows.