Allowing anonymous to have view member page and view data permissions looks like it enables the download button as well - tried in sead-demo and lowermiss (anonymous now turned off). I thought this worked correctly at one point (that 'download original' permission was needed for downloads).

PRaveen was willing to allow anonymous viewing of the lower miss project around the CUAHSI meeting so people could look, but he wants to be sure that data can't be downloaded, so verifying that this is a real issue rather than operator error and fixing it is time critical... hand it off if necessary.