[russellw]

Issue resolved. For the benefit of anybody else experiencing a similar issue, the Forms Hack actually doesn't check forum permissions before or at submission time.

In the hook for the form find the following:

if ($_REQUEST['action'] == '')
{
  $_REQUEST['action'] = "form";
}

After it add:

$bbuserinfo = $vbulletin->userinfo;
if ($vbulletin->options['apboupc_global_enable'] AND $vbulletin->options['apboupc_forum'])
	{
	$forumperms = fetch_permissions($foruminfo['forumid']);
if ($vbulletin->userinfo['userid'] AND ($forumperms & $vbulletin->bf_ugp_forumpermissions['canpostnew']) AND ($foruminfo[create_nb] !='0') AND ($foruminfo[create_nb] > $vbulletin->userinfo[posts]) AND (!is_member_of($vbulletin->userinfo, split(',', $vbulletin->options['apboupc_forum_excludedgroups']))))
	{
eval(standard_error(fetch_error('error_postcount_too_low_create', intval($foruminfo['create_nb']), intval($vbulletin->userinfo['posts']))));
		}
		}

Cheers
Russ