Add a can_view to models.
Update fk's in ajax to use can_view.
Add/update select unit tests.