enforcing view entitlements