pub async fn restricted_memberships( pool: &PgPool, actor: &Actor, ) -> AppResult<Vec<Uuid>>
The actor’s own memberships whose group is restricted.