`permission cannot_view = all - view`