Moving the control on object ownership to the user.has_perm property, this way is centralized and valid from everywhere.