restriction on views by user