play with somort of permission management

lib/__init__.py

@@ -1 +1,11 @@
-from .middleware.current_user import get_current_user
+from .middleware.current_user import get_current_user, get_current_request
+
+def permissions(instance, read = False):
+    if read:
+        return True
+    u = get_current_user()
+    if u.is_superuser or u == instance.author:
+        return True
+    return False
+
+