readonly user permissions for views