* add dummy has_access(user, location) method
* re-organize views by type of access checking needed.