Right now, RolloutStrategyUpdate allows you to edit every RolloutStrategy if you know it's UUID.

    def get_queryset(self):
        return RolloutStrategy.objects.all()

This should instead filter to only the RolloutStrategies the current user owns through their organization.