on creation of principl or view permission, build visible_to list on principal.