Voting starts in March for the Drupal Association Board election.
The biggest fix is that if a user can't see the plugin we don't return drupal_not_found(). Also the access check was weird -- checking if the user has logged in.
1) Patch now returns early if there's no access.
2) Patch checks access using user_access()