Django application that provides an object-based permissions system