fixed security gaps on views