Query returned by `readVersions` Access Control function apply to the versions collection not the original collection

[jefferyto]

Documentation Issue

The documentation for the readVersions Access Control doesn't mention that any query returned applies to the versions collection, not the original collection.

I (naively) thought the query applied to the original collection and got a QueryError as a result. It was only after some thought and testing did I realize the query applied to the versions collection instead.

It would be great if the documentation for readVersions included a note about the query applying to the versions collection. (And so a query here may not be very useful.)