where is `view_salary` permission defined?