Discussion posts and replies are publicly visible
Check permissions of the app where the record is included, and also the record itself