Issue #2012468 by joshi.rohit100, blueminds, David_Rothstein, plach | catch: Add trusted roles recommendation to 'access site reports'.

CHANGELOG.txt

@@ -1,6 +1,9 @@
 
 Drupal 7.30, xxxx-xx-xx (development version)
 -----------------------
+- Added a warning on the permissions page to recommend restricting access to
+  the "View site reports" permission to trusted administrators. See
+  DRUPAL-PSA-2014-002.
 
 Drupal 7.29, 2014-07-16
 ----------------------

modules/system/system.module

@@ -242,6 +242,7 @@ function system_permission() {
     ),
     'access site reports' => array(
       'title' => t('View site reports'),
+      'restrict access' => TRUE,
     ),
     'block IP addresses' => array(
       'title' => t('Block IP addresses'),