Profile search disregarding "edit link" setting

v2.2.3

The profile search listing page is disregarding the profile setting to disallow editing. Even with that option off, the edit link is present in search results. It looks like it's happening in both Joomla and Drupal: http://drupal.demo.civicrm.org/civicrm/profile?reset=1&gid=1

I think it's a bug in the ACL check. The change in $editLink happens in CRM/Profile/Selector/Listings.php around line 396 where Core/Permissions is called. It appears that it overrides the profile setting if the user has sufficient permissioning. That might be fine in Drupal where you can control permissioning, but in Joomla, it opens the editing to all site visitors who search the profile.