Flexible and scalable Django authorization backend object permission definition