vanilla/vanilla — pull request #1996 by R-J (2014-07-08 14:57:48+00:00)
Title: Add permission check to /utility/sort

/utility/sort has no permission check. So any registered user can write directly to column Sort in any table that contains such a column (Category, RoleID, Message)