django-guardian is an implementation of per object permissions on top of Django's authorization backend
