add permission_check to view
change parameter string to text
add permission check when edit