AT:

• when enabling basic authentication it should also be mentioned in the docs that the users need read history permission on the decision definition resource (see here)
• the comments in the config files are adjusted accordingly
• it should be mentioned in the authorization management section that the user can also define authorizations on the decisions