The code in my permissions PR includes now a manager that will filter data per team. We can use that in the API but we will have to customise the views' queryset. This as an example is the kind of mixin we use at Rockabox for this type of filtering (our viewsets extend this):

```python
class PermissionsMixin(object):
    def get_queryset(self):
        objects = super(PermissionsMixin, self).get_queryset()
        if hasattr(objects, 'filter_for_user'):
            return objects.filter_for_user(self.request.user)
        else:
            return objects.all()
```

In the GH hook case, we can adapt the queryset based on the querystring?
In other views where we filter by current user we can apply to the logged in user.

Does this make sense?