checkout the permissions.

adit i think in permissions in every class it should b obj.owner as i'm
defining obj.owner in views and also defining owners in serializers.
Anyways i tried testing it but couldn't test it properly. So please have
a look once