Submitted by: Ioana Singureanu (Eversolve (on behalf of SAMHSA))

Proposed Wording: Add something like: ".Only authorized systems/user (those that meet the access control including "Consent" directives) will be allowed to "vread" the resource based on version."

—

Comment:

This operation needs additional explicit caveats to protect unauthorized "vread".

We need to explain precisely how the security guidance should be applied to this *specific" operation including the use of Consent and Provenance to make access control decisions. (/security.html) including consent to make sure only authorized systems an users are viewing, changing, updating, or reviewing the update history of a resource.