Jerry, I just checked in [462b0f76fce8] to the repo. It should fix
this issue.

I pushed the check into hyperdb.py::Class::history(). It now checks
for View access on the property. If there is no View access, the
journal entry is not shown.  (setting enforceperm = False in the
history call skips the check).

I also pushed the filtering of quiet properties into the hyperdb from
the templating class. (on by default, calling it with skipquiet=False
reports the quiet props).

I had to fix up a few other calls to history to disable the filtering
(e.g. the code that backs the roundup-admin export function).

If you get a chance to try it.