Delete a view.

The owner/admin rule (a workspace view needs admin rights, a personal view only its owner) is enforced by the views service itself, which holds the ownerType and personId — checking here as well would cost an extra fetch to re-derive what it already knows. Its 403 is relayed verbatim.