decoupling authorization from calling the view

has_perm.py: Check if a user can access a view without calling it One of the goals: You can disable or hide a link if the user must not call it.