* changes: Make ChangeControl#getRange private and migrate caller Migrate ApprovalsUtil#checkApprovals() to PermissionBackend