Comment 1 for bug 1421657

I think this is pretty clear, so it's just about making views check permissions and act accordingly. Testing is going to be the most fun part of this :)