missing unit tests for view permission of reviews