or `permission can_view_site = district->admin`