GitLab

transactions) was covered by the "Undo changes" permission, rather
than by the "View management screens" permission.  Before it looked like
people could undo changes when they could merely see undo information.

Change so that undo information is not shown for transactions done by users
who were authenticated at a higher level.