Review permission check on creating view port

There are 2 things to review. 
1. When a user request to create a view port, do we check permission?
2. When creating view port, the user can define calculated columns. There is no permission check on this. Maybe we need a flag to disable calculated column?