Add "viewable" class method to find Things that the specified user is allowed to view.
Fix scoping for viewing specific items.