Implementation of controller and view that are permission based