Mixin for MongoEngine that manages object-level privileges