"administer url aliases" permission is now considered restricted in Drupal 7

Prior to Drupal 7.103, the "administer url aliases" was considered a normal permission.

However, as this permission allows one to override trusted urls, this can have various security implications. To reflect the sensitive nature of this permission, it has been marked as restricted as of Drupal 7.103.

Important notice for owners of existing Drupal 7 sites

Those with an existing Drupal 7 site should review the permissions they have assigned to ensure only trusted users have the 'administer url aliases' permission.