User permissions are now checked on event delivery for the standard /data/ChangeEvents channel. You receive only the change events
associated with entities for which you have permissions and don't receive the remaining change
events. Previously, if you didn't have the View All Data and View All Users permissions, you
couldn't subscribe to the /data/ChangeEvents channel and
you received an error.
Where: This change applies to Enterprise, Performance, Unlimited, and Developer
Why: For example, a user without the View All Data and View All Users permissions
but with View All on a specific object, such as Lead, can still subscribe to the /data/ChangeEvents channel. If change events are sent for
Account, Lead, and Contact, the user receives events for only the Lead object.