Issue #880916: Create 'view inline diff' permission touches on this. Basically, it seems that to expose any of the (very useful) Diff functionality to a user, they must have the 'Administer content' permission. This is a bit of a mismatch as one might have relatively low powered authors creating content. These authors could greatly benefit from being able to see visual differences.
For example, you might have an editorial workflow where things get sent back. The version differences are going to be highly important to the various players in that process.
Diffs are also useful for training purposes. Low power contributors might be very interested to learn what editors changed before they published a given piece of content. That's not possible with the current security design.
Comments
Comment #1
realityloop commentedEven though I created that issue I'd suggest looking at http://drupal.org/project/override_node_options
Please re-open if that doesn't get you to where you want.
Comment #2
alan d. commentedAnd view_unpublished may be useful.
Comment #3
mitchell commentedI don't think permissions are in the scope of this module.
Node module provides revisions access controls, and Entity API now has revisions support too, see #996696: Support revisions in Entity API.
For workflows, see modules like Content Access, Entity Access, and Rules with dynamic role assignments.