My expectation was that a user without Administrate CiviCRM permission would not be able to see another user's mailings in the Recipients: Include Mailing list.
Instead a user with access over List A can select a previous mailing that went to List B that they don't have permissions over. Would that mailing deliver? Is that not a loophole in the ACL?
Happy to be corrected if I'm missing an easy setting.