two views based on user permissions