Issue #1283442 by Ben Coleman, twistor, ggevalt: aggregator_block()'s...

Issue #1283442 by Ben Coleman, twistor, ggevalt: aggregator_block()'s permission check on the list, configure and save operations could result in loss of aggregator blocks when block rehasing is invoked with a user who has no access to feeds; permissions should only be checked on the view op