Steps to reproduce
- Enable historic instance permissions
- Grant only read permission to the process definition and a specific historic process instance
- Go to ...
- history definition view and check the historic process instance tab
- history instance view and check historic incident tab or historic called instances tab
- On definition view, the historic process instance with granted read permission is shown
- On instance view, the related historic incidents & historic called instances are shown
The tabs remain empty.
The auth check is missing for the private Webapp REST API