Move responsibility for what actions can avoid redirects to the individual controllers
No need to check for permissions in the view; only managers can see the page at all
Adjust some times when links are shown