Viewany capability also allows reply/add file capabilities.

[cdipe]

When giving the role Student dialogue permission mod/dialogue/:viewany locally in the course, all users with the role Student can not only view but also reply and add files in another student-to-teacher dialogue
Prohibiting the mod/dialogue/:replyany does not solve this.

User case: The Dialogue is used as a diary/portfolio for the student to create and other students to read.

Using Moodle 3.8.6, Dialogue 3.4 2017111300

[danmarsden]

Thanks for the report, feel free to help by contributing a pull request, or get in touch privately if you would like to fund development on the dialogue plugin.