added role control for view request and minor bug in sessionbean- Manli