Forgot to enforce permissions on calendar weekly view