add permissions for views