Hi,
The current patch 6788 forgot to update a file to allow users without full permissions, to have the list of products in the bundle option selection part (access denied).
To fix, just this new function in app/code/core/Mage/Bundle/controllers/Adminhtml/Bundle/SelectionController.php
protected function _isAllowed()
{
return true;
}