roles: view checklist for authenticated only.
roles: fetch checklist for admin and reporter only.
roles: view history - protec views with permissions too.