> hen the dataset is created an non admin user should not be able to make the dataset public.

is this the case?  This is a change of spec if you confirm this is wanted I can change things  - the spec was about not being able to change nothing about creation.  Also I thought this was about harvest created datasets.