The permission per object can be implemented in the following way: http://docs.djangoproject.com/en/dev/topics/auth/#handling-object-permissions and here is a blog post about it: http://djangoadvent.com/1.2/object-permissions/