Add to serializer only for staff and current user

[justin (Justin DiRose)]

You could try an additional serializer call like this:

plugin.rb

I haven’t tested this so you’ll want to make sure it’s secured as you need.