title: Django Auth, Users and Permissions
body: <p>I have a <strong>Organization</strong> and <strong>Employee</strong> models</p>
  
  <pre><code>class Organization(models.Model):
  
      is_active = models.BooleanField()
      name = models.CharField(u'Name', max_length = 255)
      ...
  
  class Employee(models.Model):
      user = models.OneToOneField(User)
      organization = models.ForeignKey(Organization)
      ...
  </code></pre>
  
  <p>Will it be good if I use <strong>AUTH_PROFILE_MODULE</strong>, so Employee becomes user profile?</p>
  
  <p>This way I can use Django permission system to set employees permissions, like </p>
  
  <ul>
  <li>can see all documents</li>
  <li>can see own organization documents</li>
  <li>can see his own documents</li>
  </ul>
  
  <p>Is is OK to have a permissions that are not a global one like "<strong>can see all documents</strong>"?</p>
  
  <p>And what If I also want to have a permissions per Organization? How to do this? And how to distinguish permissions per Organization and per Employee?</p>
  
  <p>Edit: I'm using Django 1.4</p>