--- a/roundup/cgi/client.py	Fri Jan 29 05:29:49 2010 +0000
+++ b/roundup/cgi/client.py	Fri Jan 29 05:46:59 2010 +0000
@@ -738,6 +738,12 @@
         if action in ('login', 'register'):
             return
 
+        # allow Anonymous to view the "user" "register" template if they're
+        # allowed to register
+        if (self.db.security.hasPermission('Register', self.userid, 'user')
+                and self.classname == 'user' and self.template == 'register'):
+            return
+
         # otherwise for everything else
         if self.user == 'anonymous':
             if not self.db.security.hasPermission('Web Access', self.userid):