tutorial 4 - adding required permissions to views