Object level permissions

[bogdandm]

https://www.django-rest-framework.org/api-guide/permissions/#object-level-permissions

def get_object(self):
    obj = get_object_or_404(self.get_queryset(), pk=self.kwargs["pk"])
    self.check_object_permissions(self.request, obj)
    return obj

So get_object already has check_permissions call. So it would be nice to impelement has_object_permission (https://github.com/encode/django-rest-framework/blob/master/rest_framework/permissions.py#L112).

It will have the same logic as has_permission but provide additional attribute object into conditions functions.

Signature of conditions would be f(self, request, view, action, object=None) -> bool. And object-level conditions should have this check:

if object is None:
    return True

P.S. If you agree with this I could impelement it and create PR.