How do we allow users to create their own views, but not modify existing views or other user's views?