Index: openacs-4/packages/forums/lib/message/row.adp
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/forums/lib/message/row.adp,v
diff -u -N -r1.16 -r1.17
--- openacs-4/packages/forums/lib/message/row.adp	25 Mar 2008 21:26:57 -0000	1.16
+++ openacs-4/packages/forums/lib/message/row.adp	16 Sep 2008 17:26:15 -0000	1.17
@@ -3,8 +3,12 @@
     <if @preview@ nil>
   <div class="action-list" style="float: right;">
     <ul>
-      <if @presentation_type@ ne "flat"><li><a href="message-post?parent_id=@message.message_id@" class="button" title="#forums.reply#">#forums.reply#</a></li></if>
-      <li><a href="message-email?message_id=@message.message_id@" class="button" title="#forums.forward#">#forums.forward#</a></li>
+      <if @permissions.post_p@ eq 1>
+        <if @presentation_type@ ne "flat"><li><a href="message-post?parent_id=@message.message_id@" class="button" title="#forums.reply#">#forums.reply#</a></li></if>
+      </if>
+      <if @viewer_id@ ne "0">
+         <li><a href="message-email?message_id=@message.message_id@" class="button" title="#forums.forward#">#forums.forward#</a></li>
+      </if>
       <if @moderate_p@>
         <li><a href="moderate/message-edit?message_id=@message.message_id@" class="button" title="#forums.edit#">#forums.edit#</a></li>
         <li><a href="moderate/message-delete?message_id=@message.message_id@" class="button" title="#forums.delete#">#forums.delete#</a></li>	
Index: openacs-4/packages/forums/lib/message/thread-chunk.adp
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/forums/lib/message/thread-chunk.adp,v
diff -u -N -r1.6 -r1.7
--- openacs-4/packages/forums/lib/message/thread-chunk.adp	5 Jun 2007 17:33:50 -0000	1.6
+++ openacs-4/packages/forums/lib/message/thread-chunk.adp	16 Sep 2008 17:26:15 -0000	1.7
@@ -4,6 +4,7 @@
     forum_moderated_p=@forum_moderated_p;noquote@
     moderate_p=@permissions.moderate_p;noquote@
     presentation_type=@forum.presentation_type@
+    &permissions="permissions"
     &message="message">
     <if @responses:rowcount@ gt 0>
       <multiple name="responses">
@@ -12,6 +13,7 @@
           forum_moderated_p=@forum_moderated_p;noquote@
           moderate_p=@permissions.moderate_p;noquote@
 	  presentation_type=@forum.presentation_type@
+          &permissions="permissions"
           &message="responses">
       </multiple>
     </if>
Index: openacs-4/packages/forums/lib/message/threads-chunk.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/forums/lib/message/threads-chunk.tcl,v
diff -u -N -r1.11 -r1.12
--- openacs-4/packages/forums/lib/message/threads-chunk.tcl	15 Jun 2007 18:58:54 -0000	1.11
+++ openacs-4/packages/forums/lib/message/threads-chunk.tcl	16 Sep 2008 17:26:15 -0000	1.12
@@ -42,12 +42,14 @@
 }
 
 # new postings are allowed if
-
+# 0. The user has post-permissions
 # 1. Users can create new threads AND the posting policy is open or
 # moderated 2. User is a moderator or adminsitrator
 
-if {([forum::new_questions_allowed_p -forum_id $forum_id] && ($forum(posting_policy) == "open" || $forum(posting_policy) == "moderated")) ||  [template::util::is_true $permissions(admin_p)] ||  [template::util::is_true $permissions(moderate_p)]  } {
+if {$permissions(post_p)} {
+  if {([forum::new_questions_allowed_p -forum_id $forum_id] && ($forum(posting_policy) == "open" || $forum(posting_policy) == "moderated")) ||  [template::util::is_true $permissions(admin_p)] ||  [template::util::is_true $permissions(moderate_p)]  } {
     lappend actions [_ forums.Post_a_New_Message] [export_vars -base "${base_url}message-post" { forum_id }] [_ forums.Post_a_New_Message]
+  }
 }
 
 if { [template::util::is_true $permissions(admin_p)] } {
@@ -59,8 +61,10 @@
     lappend actions [_ forums.ManageModerate] [export_vars -base "${base_url}moderate/forum" { forum_id }] [_ forums.ManageModerate]
 }
 
-lappend actions [_ forums.mark_all_as_read] [export_vars -base "${base_url}mark_all_readed" { forum_id }] {}
-
+if {$user_id != 0} {
+  lappend actions [_ forums.mark_all_as_read] [export_vars -base "${base_url}mark_all_readed" { forum_id }] {}
+}
+
 template::list::create \
     -name messages \
     -multirow messages \
Index: openacs-4/packages/forums/tcl/forums-security-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/forums/tcl/forums-security-procs.tcl,v
diff -u -N -r1.9 -r1.10
--- openacs-4/packages/forums/tcl/forums-security-procs.tcl	17 Dec 2003 15:45:30 -0000	1.9
+++ openacs-4/packages/forums/tcl/forums-security-procs.tcl	16 Sep 2008 17:26:15 -0000	1.10
@@ -140,6 +140,7 @@
 
     ad_proc -public permissions {
         {-forum_id:required}
+        {-user_id ""}
         array_name
     } {
       upvar $array_name array
@@ -149,8 +150,24 @@
       if { !$array(admin_p) } {
         array set array [list moderate_p [forum::security::can_moderate_forum_p -forum_id $forum_id]]
         if { !$array(moderate_p) } {
-          array set array [list post_p [expr { [ad_conn user_id] == 0 || [forum::security::can_post_forum_p -forum_id $forum_id] }]]
+          if {$user_id eq ""} {
+            set user_id [ad_conn user_id]
+          }
+          # Set post_p according to permissions ...
+          array set array [list post_p [forum::security::can_post_forum_p -forum_id $forum_id -user_id $user_id]]
+          #
+          # ... alternatively, we could use a parameter to behave like
+          # in earlier versions just leave it is a reminder, if
+          # someone still likes the old behavior.  This code should be
+          # removed later....
+          #
+          # if {$user_id == 0 && [parameter::get -parameter "OfferPostForAnonymousUserP" -default 1]} {
+          #   array set array [list post_p 1]
+          # } else {
+          #   array set array [list post_p [forum::security::can_post_forum_p -forum_id $forum_id -user_id $user_id]]
+          # }
         } else {
+          # moderators can always post
           array set array [list post_p 1]
         }
       } else {
Index: openacs-4/packages/forums/www/message-view.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/forums/www/message-view.tcl,v
diff -u -N -r1.44 -r1.45
--- openacs-4/packages/forums/www/message-view.tcl	12 Mar 2008 05:26:43 -0000	1.44
+++ openacs-4/packages/forums/www/message-view.tcl	16 Sep 2008 17:26:15 -0000	1.45
@@ -33,13 +33,24 @@
     ad_script_abort
 }
 
+set user_id [ad_conn user_id]
 forum::security::require_read_message -message_id $message_id
-forum::security::permissions -forum_id $message(forum_id) permissions
+forum::security::permissions -forum_id $message(forum_id) -user_id $user_id permissions
 
 # Check if the user has admin on the message
 set permissions(moderate_p) [forum::security::can_moderate_message_p -message_id $message_id]
 if {!${permissions(moderate_p)}} {
+    # Set post_p according to permissions ...
     set permissions(post_p) [forum::security::can_post_forum_p -forum_id $message(forum_id)]
+    # ... alternatively, we could use a parameter to behave like
+    # in earlier versions just leave it is a reminder, if
+    # someone still likes the old behavior.  This code should be
+    # removed later....
+    # if {$user_id == 0 && [parameter::get -parameter "OfferPostForAnonymousUserP" -default 1]} {
+    #   set permissions(post_p) 1
+    # } else {
+    #   set permissions(post_p) [forum::security::can_post_forum_p -forum_id $message(forum_id)]
+    # }
 } else {
     set permissions(post_p) 1
 }
@@ -71,9 +82,8 @@
     set notification_chunk ""
 }
 
-if { [forum::use_ReadingInfo_p] && [string equal $message(state) approved] } {
+if { [forum::use_ReadingInfo_p] && $message(state) eq "approved" } {
     set msg_id $message(root_message_id)
-    set user_id [ad_verify_and_get_user_id]
     set db_antwort [db_exec_plsql forums_reading_info__user_add_msg {}]
 }
 
@@ -85,7 +95,7 @@
     lappend context "$message(subject)"
 }
 
-if { $permissions(post_p) || [ad_conn user_id] == 0 } {
+if { $permissions(post_p) } {
     set reply_url [export_vars -base message-post { { parent_id $message(message_id) } }]
 }