Use @RolesAllowed instead of a parameter for CDIView (#11398)

Change-Id: Iae0e526dd6745b68fbf27964f680a291bfa3d70e