fixed site panel has_view_permission so worker doesn't get 403'd