protect configviews form with a permission