ProjetSigma / backend

        # But can always see your own custom fields

        return self.queryset.filter(Q(membership__group__in=my_groups) | Q(membership__user=self.request.user.id))

    def create(self, request):

        serializer = GroupMemberValueSerializer(data=request.data)

        if not serializer.is_valid():

            return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)

        mship = serializer.validated_data.get('membership')

        # Only Sigma admins can create values for other members

        if mship.user != request.user and not request.user.is_sigma_admin():

            return Response(status=status.HTTP_400_BAD_REQUEST)

        serializer.save()

        return Response(serializer.data, status=status.HTTP_201_CREATED)

        #my_groups = Group.objects.filter(memberships__user=self.request.user.id)

        return self.queryset.filter(group__in=my_groups)

    def create(self, request):

        serializer = GroupFieldSerializer(data=request.data)

        if not serializer.is_valid():

            return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)

        if not request.user.has_group_admin_perm(serializer.validated_data.get('group')):

            return Response('Not group administrator', status=status.HTTP_403_FORBIDDEN)

        serializer.save()

        return Response(serializer.data, status=status.HTTP_201_CREATED)

    @decorators.detail_route(methods=['post'])

    def validate(self, request, pk):