add a separate "view edit history" permission