add can view authorization