View
A saved view. Wow already rejects a command whose owner is not the view's, whose expected version is stale, or that addresses a deleted view; the view rejects one from another application as not found.
A view of the owner (system) is a stored system view: it is global, so it is created under the tenant (platform) only (not even Wow's default tenant (0)), and it never moves audience (share and claim are refused). Who may write one is the security gateway's decision, by its path …/tenant/(platform)/owner/(system)/….
Functions
Moves a shared view to the owner named by ClaimView.toOwnerId, the caller's own path. It is dispatched to the view's current owner, so Wow's owner check passes only for a view that is shared (or, in process, for a personal view claimed by the owner it already has, which records the change to the same owner). A view some shared dashboard references stays shared.
The delete (DELETE …/view/{id}), in place of Wow's default one, adding the application rule: a view of another application reads as not found. Wow's recover and resource-tags commands are left to Wow; their routes are closed for the view store, so they are in-process only.
Moves a personal view to the owner (shared). Wow has already checked that the command comes from the view's owner path. A view already shared records the change to the same owner, since every Wow command records an event; the view store's route answers that case without a command.