from rest_framework import permissions

class IsMemberOrTeamOwner(permissions.BasePermission):
    def has_object_permission(self, request, view, obj):
        # obj は Member インスタンス
        return request.user == obj.user or request.user == obj.team.owner