Index: openacs-4/packages/forums/tcl/forums-security-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/forums/tcl/forums-security-procs.tcl,v diff -u -r1.7 -r1.7.2.1 --- openacs-4/packages/forums/tcl/forums-security-procs.tcl 21 Sep 2003 19:58:58 -0000 1.7 +++ openacs-4/packages/forums/tcl/forums-security-procs.tcl 18 Nov 2003 20:38:55 -0000 1.7.2.1 @@ -41,7 +41,12 @@ {-user_id ""} {-message_id:required} } { - return [permission::permission_p -party_id $user_id -object_id $message_id -privilege read] + # if the user is a guest, they can't see any forum messages at all + if { ![acs_privacy::user_can_read_private_data_p -user_id $user_id -object_id [dotlrn::get_package_id]] } { + return 0 + } else { + return [permission::permission_p -party_id $user_id -object_id $message_id -privilege read] + } } ad_proc -public require_read_message {