django 1.5 has now fixed the issue with history view permissions