Use permission map to protect dashboard views