added restriction for any user updating views