title: django row based permission
body: <p>django's 1.3 docs say</p>
  
  <blockquote>
    <p>To enable object permissions in your own authentication backend you'll just have to allow passing an obj parameter to the permission methods and set the supports_object_permissions class attribute to True.</p>
  </blockquote>
  
  <p>So I implemented my own authentication backend, set <code>supports_object_permissions = True</code> and defined a <code>def has_perm(self, user_obj, perm, obj=None)</code>.</p>
  
  <p>What I would <em>expect</em> now, is that navigating through the admin pages causes that method to be called mutltiple times (which does happen) and also, when I am on a model's listing site, the <code>obj</code> parameter to be filled with the actual objects. E.g. when I am listing products of a shop, for each of these products that method would get called so I can determine individually if that object shall be displayed and so on.</p>
  
  <p>What <em>actually happens</em> though, is that <code>obj</code> is always <code>None</code>. Am I getting that concept wrong or do I have to anything else so that my actual objects get passed in there?</p>