Fixed reply link shows without permissions.

Don't worry, clicking the link returns a 403, so this is not a
security flaw.