permission to view a flag's status, but not use it

Flag anonymous seems to be a good solution to this problem in my testing.
@Murz, thanks for the tip.

Another way to achieve this is to give flag and unflag permissions to all the roles, and then add a new template suggestion for the flag if the user has the role that should only have the missing "view" permission. In your new template print only the {{ title }}. This will handle at least the ajax link flagging.

@awolfey
Clever! I like it. I'm not sure I'm going to use it, but you just made me smarter.