Add who_can_X_on actions to team controller
Add JSON views