so this is where a subject relation can come into conflict: you're saying the members of the team are

direct_editor

, but you are forced to grant the wildcard to the team itself (as you identified). if you need to check the team as well, you probably want

direct_editor: user | team

and use an arrow to check the members of the team as well in the permission