Add verification of viewing permission to isAuthorized()