fix: permission on favoriting_view