Add access control in public section to users teams

app/controllers/teams/application_controller.rb

 class Teams::ApplicationController < ApplicationController
+
+  before_filter :authorize_manage_user_team!
+
   protected
 
   def user_team
     @user_team ||= UserTeam.find_by_path(params[:team_id])
   end
 
+  def authorize_manage_user_team!
+    return access_denied! unless can?(current_user, :manage_user_team, user_team)
+  end
+
 end

app/controllers/teams/members_controller.rb

 class Teams::MembersController < Teams::ApplicationController
   # Authorize
-  before_filter :authorize_manage_user_team!, only: [:new, :edit]
+  skip_before_filter :authorize_manage_user_team!, only: [:index]
 
   def index
     @members = @user_team.members

app/controllers/teams/projects_controller.rb

 class Teams::ProjectsController < Teams::ApplicationController
+
+  skip_before_filter :authorize_manage_user_team!, only: [:index]
+
   def index
     @projects = user_team.projects
     @avaliable_projects = current_user.admin? ? Project.without_team(user_team) : (Project.personal(current_user) + current_user.projects).uniq