From bdf0b3dc5989d89dc87e9828e922b20880fce7b3 Mon Sep 17 00:00:00 2001
From: Philip Bauer <bauer@starzel.de>
Date: Wed, 11 Aug 2021 10:57:32 +0200
Subject: [PATCH 1/3] Protect @@historyview with Modify portal content
 permission. Fixes https://github.com/plone/Products.CMFPlone/issues/3297

---
 plone/app/upgrade/v60/profiles/to_alpha1/actions.xml | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 plone/app/upgrade/v60/profiles/to_alpha1/actions.xml

diff --git a/plone/app/upgrade/v60/profiles/to_alpha1/actions.xml b/plone/app/upgrade/v60/profiles/to_alpha1/actions.xml
new file mode 100644
index 00000000..c0bfb09a
--- /dev/null
+++ b/plone/app/upgrade/v60/profiles/to_alpha1/actions.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0"?>
+ <object name="object" meta_type="CMF Action Category">
+  <object name="history" meta_type="CMF Action" i18n:domain="plone">
+   <property name="permissions">
+    <element value="Modify portal content"/>
+   </property>
+  </object>
+ </object>
+</object>

From 4df4c5fc28fe40c3ec265901d5b43974c5652cfe Mon Sep 17 00:00:00 2001
From: Philip Bauer <bauer@starzel.de>
Date: Wed, 11 Aug 2021 11:00:47 +0200
Subject: [PATCH 2/3] add changenote

---
 news/254.feature | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 news/254.feature

diff --git a/news/254.feature b/news/254.feature
new file mode 100644
index 00000000..438e9900
--- /dev/null
+++ b/news/254.feature
@@ -0,0 +1,2 @@
+Protect @@historyview with Modify portal content permission. Fixes https://github.com/plone/Products.CMFPlone/issues/3297
+[pbauer]
\ No newline at end of file

From c07e9ecf59e43620dba5d148ba0f44fc4a1678ae Mon Sep 17 00:00:00 2001
From: Philip Bauer <bauer@starzel.de>
Date: Wed, 11 Aug 2021 13:18:52 +0200
Subject: [PATCH 3/3] fix xml

---
 plone/app/upgrade/v60/profiles/to_alpha1/actions.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/plone/app/upgrade/v60/profiles/to_alpha1/actions.xml b/plone/app/upgrade/v60/profiles/to_alpha1/actions.xml
index c0bfb09a..55e5faf8 100644
--- a/plone/app/upgrade/v60/profiles/to_alpha1/actions.xml
+++ b/plone/app/upgrade/v60/profiles/to_alpha1/actions.xml
@@ -1,4 +1,6 @@
 <?xml version="1.0"?>
+<object name="portal_actions" meta_type="Plone Actions Tool"
+   xmlns:i18n="http://xml.zope.org/namespaces/i18n">
  <object name="object" meta_type="CMF Action Category">
   <object name="history" meta_type="CMF Action" i18n:domain="plone">
    <property name="permissions">