[...] As you get the full range of permissions, you could easily prevent a user from posting anywhere, or prevent then from posting in a particular forum (or prevent them from viewing that forum), or even give someone access to download attachments in a forum when they normally couldn't.