autorize resource in views