global.requireViewFeedback = function(req, res, next) {
    if (res.locals.user.canFeedback != 1) {
        if (res.locals.apiCall) {
            res.json({
                status: "forbidden",