Issue #2157541 by dawehner, penyaskito, tim.plunkett, Désiré: Views sets access to ANY on routes - could result in information disclosure