I have just encountered that not being logged in I am still able to access the module list with the following:

8069/?db=openerp&ts=1379525415880#page=0&limit=80&view_type=list&model=ir.module.module&action=38

Unfortunately I don't have enough karma to post a screen shot but it is in fact displaying all the modules while not being logged in, with the ability to install and uninstall????

If anyone would like to see the screen shots just let me know