Complex permissions flow for django-rest-framework.