Just noticed that if you have "repost' enabled on your site, it will allow members to repost anything into the public stream, even if the original poster has the privacy set to 'friends only'. This is a BIG legal risk for site owners. The repost function really needs to only be available if the original post is set to public.