Fix an ACL check issue for DownloadStatements

process/views.py

@@ -511,6 +511,8 @@ class UpdateKeycheck(RequirementMixin, View):
 
 
 class DownloadStatements(VisitProcessMixin, View):
+    require_visit_perms = "view_intent"
+
     def get(self, request, *args, **kw):
         data = self.process.get_statements_as_mbox()
         res = http.HttpResponse(data, content_type="text/plain")