diff --git a/docs/en/04_Changelogs/rc/3.3.0-rc2.md b/docs/en/04_Changelogs/rc/3.3.0-rc2.md
index 721b4f23c..8b6d95bea 100644
--- a/docs/en/04_Changelogs/rc/3.3.0-rc2.md
+++ b/docs/en/04_Changelogs/rc/3.3.0-rc2.md
@@ -1,9 +1,32 @@
 # 3.3.0-rc2
 
+## Upgrading notes
+
+### New permission model for Versioned DataObjects
+
+When adding the `Versioned` extension to dataobjects, typically it's necessary to explicitly declare
+permissions on these objects in order to prevent un-published content surfacing to unauthenticated users.
+
+In order to better support this, versioned by default will now deny canView permissions on objects
+that are not published.
+
+For more information on how to customise the permission model for versioned dataobjects then please
+refer to the [versioned extension documentation](../../developer_guides/model/versioning).
+
+### Block ?stage=Stage for unauthenticated users
+
+By default users must now be logged in with CMS access permissions in order to change the viewing
+mode of the site frontend using the `?stage` querystring parameter.
+
+This permission can be customised by altering the `Versioned.non_live_permissions`
+config by assigning a different set of permissions.
+
+
 <!--- Changes below this line will be automatically regenerated -->
 
 ## Change Log
 
 ### Bugfixes
 
+ * 2016-02-03 [15fba5a](https://github.com/silverstripe/silverstripe-framework/commit/15fba5a4cb29d8872cf42f609f6af6dd8e202de5) Remove old logout icon on retina screens (Scott Hutchinson)
  * 2016-02-09 [2ad490c](https://github.com/silverstripe/silverstripe-cms/commit/2ad490c3e2d256d8dcd16398631c114aa2a3370e) Prevent folders deleted on the filesystem from breaking asset interface (Damian Mooyman)