views and authorization