fix some access rules on views on users