Require login for the widget and operator code views
Add permission check for the TabCollection's post operation