I was recently surprised that Django can handle object level permissions very nicely. The support is built in, but nit implemented in Django itself, but you can

I was recently surprised that Django can handle object level permissions very nicely. The support is built in, but nit implemented in Django itself, but you can simply use django-guardian and everything just works.