enabling security for backend views