[dba-SQLServer]Security Permissions on Views

We recently implemented a system trying to implement security at the view level.  Upon deploying, it was discovered that security at the view level appeared to have no relevance.  We ended up having to set permissions on the tables themselves.  The vendor of the application stated that there was a bug in SQL Server that M$ had not fixed yet such that the permissions on view didn't work.  Is this true?  

Ken Stoker
Technology Commercialization
Information Systems Administrator
PH: (509) 375-3758
FAX: (509) 375-6731
E-mail:  Kenneth.Stoker at pnl.gov