[#54] finished views authorization logic