diff --git a/resources/sql/youyesyet.postgres.overrides.sql b/resources/sql/youyesyet.postgres.overrides.sql
index dad6bce..d0c7a9b 100644
--- a/resources/sql/youyesyet.postgres.overrides.sql
+++ b/resources/sql/youyesyet.postgres.overrides.sql
@@ -1,3 +1,22 @@
+------------------------------------------------------------------------
+-- User `youyesyet` (the app, and less secure parts of the site)
+-- must have the permissions of `canvassers`.
+------------------------------------------------------------------------
+DO
+$do$
+BEGIN
+ IF NOT EXISTS (
+ SELECT -- SELECT list can stay empty for this
+ FROM pg_catalog.pg_roles
+ WHERE rolname = 'youyesyet') THEN
+
+ CREATE ROLE youyesyet LOGIN PASSWORD 'thisisnotsecure';
+ END IF;
+END
+$do$;
+
+grant canvassers to youyesyet;
+
------------------------------------------------------------------------
-- convenience view lv_followupactions of entity followupactions for
-- lists, et cetera
@@ -23,3 +42,4 @@ WHERE followupactions.request_id = followuprequests.id
AND visits.address_id = addresses.id
AND followupactions.actor = canvassers.id
;
+GRANT SELECT ON lv_followupactions TO canvassers, issueexperts;
diff --git a/resources/templates/issue-expert/request.html b/resources/templates/issue-expert/request.html
index 295ba19..6207c25 100644
--- a/resources/templates/issue-expert/request.html
+++ b/resources/templates/issue-expert/request.html
@@ -36,7 +36,7 @@
{% ifmemberof issueexperts analysts issueeditors admin %}
- by {{visit.canvasser_id_expanded}} at {{visit.date}}
+ by {{visit.canvasser_id_expanded}} on {{visit.date}}
{% else %}
@@ -46,8 +46,17 @@
+ {% ifmemberof issueexperts analysts issueeditors admin %}
+
+ {{issue.id}}
+
+ {% else %}
+
+ You are not permitted to view visit of followuprequests
+
+ {% endifmemberof %}
{% ifmemberof issueexperts admin %}