Some shuffling of responsibility for user access to forum notifications.
Removing more magic numbers. I think this is the last of them.
Only check user filter if user was passed, else reject.
Template fix, d'oh!