An authenticated user has all permissions on list view: fixes #7