URGENT: Gold priv users can edit thread posts to solution threads on levels they haven't solved.
When a user has over 1000 karma, they achieve gold status. This enables the 'discussion.edit' permission. In this route, there is no confirmation that the thread requested is not a spoiler for a level the user has not completed. Thus if a user can determine the post_id of a spoiler post, they can access that post through the edit form and read the solution.