Well I thought I found the answer, but guess not -
I currently have RP set up for users and Admin to add products and reviews. However, anyone can add products without logging in or registering.
Here's the link
Review post is set up as the index page and vb3 is in a folder called forum
Sorry if this is one of those often-answered questions, but I've searched the forum and so far haven't found the solution. I've tried about every combination of the Usegroup settings.