pub fn require_manager_or_admin(user: &CurrentUser) -> Result<(), ApiError>
Both roles that may read the team.