did 2 things. Introduced IDOR and provided a way to delete both the project as well as (and this was unknown to me), Django will remove any mappings or associations as well. Tested and it worked!