Move variables into view
Add permission input
Add User validations