temporary update

rog/permissions.py

@@ -0,0 +1,6 @@
+from rest_framework import permissions
+
+class IsMemberOrTeamOwner(permissions.BasePermission):
+    def has_object_permission(self, request, view, obj):
+        # obj は Member インスタンス
+        return request.user == obj.user or request.user == obj.team.owner