User autocomplete gives 403 errors with certain combinations of permissions

Hello from the testing pancake session!

Here's a patch with a test.
But it fails.
We think this is because of a bug in Drupal core, as testing this manually with a user with 'administer nodes' permission gives us a 403 on the autocomplete field.
We're on 7.x-dev so could someone give this a try on CVS HEAD, and if it's still not working file a bug on core?

Here's the patch with the test.

You will need the 'access user profiles' permission to use the user autocomplete.

It seems like you need to have the 'access user profiles' permission:

  $items['user/autocomplete'] = array(
    'title' => 'User autocomplete',
    'page callback' => 'user_autocomplete',
    'access callback' => 'user_access',
    'access arguments' => array('access user profiles'),
    'type' => MENU_CALLBACK,
  );

I posted a patch and a test to fix the bigger problem in #284887: Check for access to autocomplete paths during form building

Arg...did not mean to change title at all...

Test for user autocomplete is in the patch with #284887: Check for access to autocomplete paths during form building. Marking this as a duplicate.