I forgot about the result view. Permissions could be handled better using inheritance.