text: from rest_framework import permissions
  
  
  class IsOwnerOrReadOnly(permissions.BasePermission):
      def has_object_permission(self, request, view, obj):
  
          if request.method in permissions.SAFE_METHODS:
              return True
          return str(obj.user) == str(request.user)