implemented permission check on credentialview