Last modified: 2010-05-15 15:37:57 UTC
I set it up so that the access level 'user' does not have permissions to move pages, but this restriction is never enforced, I have checked and (i think) verified this in the SpecialMovepage.php file. It seems like currently it's allowing any logged in user to move any unprotected page.
Fixed on CVS HEAD and REL1_5. http://mail.wikipedia.org/pipermail/mediawiki-cvs/2005-August/010919.html