Github user markobean commented on the issue:
https://github.com/apache/nifi/pull/2703
I believe the latest changes are demonstrating the intended functionality.
Provenance events are only listed in the query results if the user has 'view
provenance' on the corresponding component; flowfile content in the event
details is only visible based on 'view the data' policy; component name and
type is only visible based on 'view the component' policy (replaced with
generic info such as UUID in place of name when policy is lacking.) I'll do
some further testing today.
---
