Authorize based on team membership