Hmmm so what I am confused by is how a user who does not have read_private_data_p can even start the forum posting process.

Do we need a check for this before we start the posting procees?

Does the user have read private data p on some objects but not others?

Another thing..if the forum is not under dotLRN then it should not check read_private_data_p as that is a dotLRN concept. Can you take a look and make sure this is the case when you have a chance Andrew.