civicrm/civicrm-core — pull request #2389 by dlobo (2014-01-21 21:52:55+00:00)
Title: CRM-14101 - Unauthenticated/anonymous users can register for events even when Drupal permissions should stop them

The previous fix done in this commit: https://github.com/civicrm/civicrm-core/commit/d551c85d

was to prevent a notice but also gave anon users (or other users) permission for an event

http://issues.civicrm.org/jira/browse/CRM-14101