Permission "administer advanced_blog" required for authenticated user to enter blog information

Authenticated users ie bloggers do not get the input fields to enter blog information (blog title and description) when editing their user account page without being granted the "administer advanced_blog" permission. This is bad as it also allows "normal authenticated users" to access admin/settings/advanced-blog.

In advanced_blog.module the "Helper function: create the form on the user settings page" is referring to permission "edit own advanced_blog" although this permission has never been defined.

Changing

function advanced_blog_form_advanced_blog($edit, $account, $category) {
 if ($category == 'account' && is_numeric(arg(1)) && (user_access('edit own advanced_blog') || user_access('administer advanced_blog'))) {

to

function advanced_blog_form_advanced_blog($edit, $account, $category) {
 if ($category == 'account' && is_numeric(arg(1)) && (user_access('access advanced_blog') || user_access('administer advanced_blog'))) {

is a workaround but probably not a solution.

This might also be related to what is being discussed at http://drupal.org/node/469340 but has nothing to do with Nodeaccess or Simple Access as the problem occurs without any of these modules.

There is no documentation as to whether this issue has been addressed in 6.x-1.x-dev and testing this version shows the same security problem.