It is both. You have the right to post, but they have the right to decide what is being done with the data being received (e.g. to save it, discard it, queue fo

It is both. You have the right to post, but they have the right to decide what is being done with the data being received (e.g. to save it, discard it, queue for moderation, treat it as a SQL query (if you do, you should ensure it is properly secured so that you can't access or alter data that you are not supposed to do), etc)