django-guardian documentation. Per-object permissions for Django.