1. One role, based on limited.
If the permission, as I understand it, allows the people having it to read others' topics, then I'd say:
Edit: I forgot to say that I think this feature should be in the core. If you don't want it just don't apply this to any forum and that's it.