add can_view permissions
add permissions to bpm.contrib.hub