add access right to consults_controller
render json