* let view_team permission be handled by global ACLs * code style and API docs * improve permission check