Require "view recent changes" permission to see the recent changes.

modules/recent_changes/cms_recent_changes_module.e

@@ -86,6 +86,7 @@ feature -- Handler
 			end
 
 			create {GENERIC_VIEW_CMS_RESPONSE} r.make (req, res, api)
+			if r.has_permission ("view recent changes") then
 				create l_changes.make (l_size, l_until_date, l_filter_source)
 
 				create l_content.make (1024)
@@ -196,6 +197,9 @@ feature -- Handler
 					create htdate.make_from_date_time (l_until_date)
 					r.set_title ("Recent changes before " + htdate.string)
 				end
+			else
+				create {FORBIDDEN_ERROR_CMS_RESPONSE} r.make (req, res, api)
+			end
 
 			r.execute
 		end