support permissions as field metadata
fix getView(name) so it actually uses the name param