Add in the permission based viewing we had in the d7 fork

Comments

Rob Holmes created an issue.