civicrm/civicrm-core — pull request #4291 by mrpaulc (2014-10-01 19:56:24+00:00)
Title: CRM-12920 - search exposes bulk actions user has no permission to access...

See comments attached to JIRA issue for details.
----------------------------------------
* CRM-12920: Edit all contacts permission overrides CiviEvent/CiviContrib permissions in search
https://issues.civicrm.org/jira/browse/CRM-12920