silverstripe/silverstripe-framework — pull request #2339 by chillu (2013-08-19 13:16:50+00:00)
Title: Limit Group.ParentID edits to ADMIN

This prevents privilege escalation by an authenticated CMS user
with CMS_ACCESS_SecurityAdmin permissions, but no ADMIN permissions.