Secure PUBLIC/PRIVATE on Factiis, Spaces. To include s/ f/ post/id plus all feed.
- postObjDTO needs to check if post is allowed. If an ID gets into it that is not it needs to log an error as the other routes should have stopped this before they got to the postObjDTO.
- Lock down f/
- Lock down s/
- Lock down individual factiiis
