Test if asset linking outside views work in 4.1
Tighten authorization in Venue