No sense in showing the envelope history page only to people with certain permissions, since the page is already protected by view