experimenting with user permissions in view