Hi Malte, regarding the initial post, we basically went through the code, fixed the problems as they occurred, and either applied the fixes back to openacs or reported them.
I do remember fixing this one and reporting it to someone (can't remember who) but it sounds like it fell through the cracks.
Here is the script we used:
update acs_permissions
set privilege = 'read'
where privilege = 'forum_read';
update acs_permissions
set privilege = 'write'
where privilege = 'forum_write';
update acs_permissions
set privilege = 'create'
where privilege = 'forum_create';