It's probably not a bug as such, though it's unexpected and not mentioned any of the documentation, or anywhere in the issue queue that I could find, but without the View Administration Theme permission, users can see the Access control tab, but not any content on the tab.
Interestingly, the content is present, but the block is hidden: there form on the page has a div on it, containing all the content, and it has display: none.
Took me quite a while to figure out. Hopefully this issue will help someone else. This is marked as minor because I put a comment on the documentation pages too.
Comments
Comment #1
gisleThis issue has not received any updates in the previous 7 years. If you believe it to still be relevant, you are encouraged to reopen the issue and update it.
If you got an email about this Issue status update, it is because you at one time (possibly a very long time ago), subscribed to it. To learn how to unsubscribe yourself, please visit: https://www.drupal.org/project/webmasters/issues/3142987
Comment #2
gisle