Is the permission name right here? Should it be 'view incidents'? What does 'view data' mean?