Mark link shows to users without permissions to click on it

In views_handler_field_mark.inc, the return line should be surrounded by an access check:

    if (user_access('mark items')) {
      return theme('mark_link', $links);
    }