Index: openacs-4/packages/forums/tcl/forums-security-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/forums/tcl/forums-security-procs.tcl,v diff -u -r1.7 -r1.8 --- openacs-4/packages/forums/tcl/forums-security-procs.tcl 21 Sep 2003 19:58:58 -0000 1.7 +++ openacs-4/packages/forums/tcl/forums-security-procs.tcl 11 Dec 2003 21:40:04 -0000 1.8 @@ -41,7 +41,12 @@ {-user_id ""} {-message_id:required} } { - return [permission::permission_p -party_id $user_id -object_id $message_id -privilege read] + # if the user is a guest, they can't see any forum messages at all + if { ![acs_privacy::user_can_read_private_data_p -user_id $user_id -object_id [ad_conn package_id]] } { + return 0 + } else { + return [permission::permission_p -party_id $user_id -object_id $message_id -privilege read] + } } ad_proc -public require_read_message {