At function and history read -permission

I noticed that when history read -permission is off for a role for a collection, the user can still read historical version of document in that collection by doing At(ts, Get(ref)). Why is this? Missing history read -permission does seem to block for example using Events function.

Hi @olazabal

Thank you for reporting this. It is not expected behavior and I have filed an internal ticket to address the issue.