Answer
Scope that specific action at the permission-set level for the role that legitimately needs it, and treat "who can post this" as a question you should be able to answer from the permission-set design alone, not from memory. See understand permission sets.