As long as we cannot support the fine granular security model which was used in Forum shipped with M4.5, we only apply a simple security.

To have access to the App you must have at least the role "forum-moderator-base".
Every Forum-Mod. (and Forum-Admin) should have this role.

Anyway order the actions in the actionbar in the following way:

Root

• add Forum

Forum:

• Delete forum
• Lock forum
• Unlock forum
• Create thread

Thread:

• Lock thread
• Unlock thread
• Delete thread

Message

• Edit message
• Delete message
• Validate message
• Invalidate message