We recently changed the permission model to disallow guests to read Releases. The spec should be updated as well according to the expectation.