Introduce consistent method of doing permissions checking in views, probably with a decorator, rather than the current ad-hoc method.