https://medium.com/django-unleashed/strengthening-web-application-security-with-django-lockdown-mastering-access-control-in-django-145a83c4eda9