`view data` allows you to view (read-only) any non-admin data. Should I add specific permissions for different object types?