1) Post counts from private forums are included in the counts for a user that does not have access to certain private forums.
2) The Who's Online list will display the title of a topic or post, even if a user doesn't have access to view it.
So the post count should change? Hehe I don't think this would make sense, technically it's just a value that goes +1 on each post... recalculting all post based on security for each user would be terribly slow. Running InstantASP forum with many code change.