Accepted-answer manipulation via permissive rank configuration

Missing authorization in Apache Answer before 1.0.9 allows remote authenticated users to mark their own answers as accepted. The rank.answer.accept configuration assigns rank 1 to the accept action, permitting ordinary users to invoke it; the fix disables that rank grant with -1. A registered low-rank account is sufficient, and exploitation changes answer-selection integrity without disclosing data or interrupting service.