Restrict access to views when user is not involved