Hello, we have the same problem. There are for this CDOT KB Doc ID 8010364 and for 7Mode this KB Doc ID 1010287. In 7Mode that works with the workaround, when CDOT it does not go, there is the option Volume -snapdir-access, but if true then are previous version, the SnapShots visible to all users. Probably just the solution via GPO is hide the previous version tab.
A question for the round, someone has an idea ...?
our problem is, that we have to point 5 attempts from the document KB Doc ID 8010364. once -snapdir-access true, the user will have full access according to their ADS privileges on the tab Previous Version. We currently have a GPO that the normal user hides the recovery in use, only admins.