private boolean canViewLogs(ConnectionRecord record) {

        // Administrator can always view
        if (isAdmin)
            return true;

        // Non-administrator CANNOT view if permissions cannot be verified
        String identifier = record.getConnectionIdentifier();
        if (identifier == null)
            return false;

        // Non-administer can only view if they implicitly have permission to
        // configure recordings (they have permission to edit)
        ObjectPermission canUpdate = new ObjectPermission(ObjectPermission.Type.UPDATE, identifier);
        return connectionPermissions.contains(canUpdate);

    }
Returns whether the current user has permission to view the logs
associated with the given history record. It is already given that the
user has permission to view the history record itself. This extension
considers a user to have permission to view history logs if they are
an administrator or if they have permission to edit the associated
connection.

@param record
    The record to check.

@return
    true if the current user has permission to view the logs associated
    with the given record, false otherwise.
extensions/guacamole-history-recording-storage/src/main/java/org/apache/guacamole/history/connection/RecordedConnectionActivityRecordSet.java