views and permissions