add rbac to rest api views