@POST
    @ApiOperation("Get all views that match given parameter value")
    @NoAuditEvent("Only returning matching views, not changing any data")
    public Collection<ViewParameterSummaryDTO> forParameter(@Context SearchUser searchUser) {
        return qualifyingViewsService.forValue()
                .stream()
                .filter(searchUser::canReadView)
                .collect(Collectors.toSet());
    }
@Test
    public void returnsNoViewsIfNoneArePermitted() {
        final SearchUser searchUser = TestSearchUser.builder()
                .denyView("view1")
                .denyView("view2")
                .build();

        final QualifyingViewsService service = mockViewsService("view1", "view2");
        final QualifyingViewsResource resource = new QualifyingViewsResource(service);
        final Collection<ViewParameterSummaryDTO> result = resource.forParameter(searchUser);

        assertThat(result).isEmpty();
    }