add security for service layer, change view