enabled/disabled views, enforcing user status