TODO viewGroup permissions change to handle anonymous users